Privacy Policy
Last updated: 30 July 2026
This policy explains what personal data Brickwork collects, why, and what your rights are. Brickwork is an independent web-design studio based in the United Kingdom and is the "data controller" for the information described below. I've kept this in plain English.
In short: I only collect what you send me through the contact form, I use it solely to reply and (if you go ahead) deliver your project, I never sell it, and you can ask me to delete it at any time.
What I collect
- Enquiry details you submit: your name, business name, email address, optional phone number, the service you're interested in, and anything you write in the message field.
- Technical data: like most websites, my host and my form provider may log standard request data such as IP address and browser type for security and abuse prevention. This site sets no tracking or advertising cookies of its own.
Cookies & local storage
This site sets no cookies. If you use the currency switcher on the pricing section, your choice (e.g. "GBP") is saved in your browser's local storage so the page remembers it next time. That value never leaves your device and identifies nothing about you. All fonts are hosted on my own website, so viewing this site does not cause your browser to contact Google or any other font provider.
The chat on my site
The "Ask me" chat is built and hosted by me, not bought in from a chat company. It has two modes, and they handle your messages differently.
Talking to the AI assistant. This needs no account, sets no cookies and does not store your conversation — it exists only in your browser tab and is gone when you close it. To generate each reply, what you type is sent to my own server, which passes it to Groq (my AI provider) for processing. Groq's service agreement bars it from using what is sent to train or fine-tune AI models, and it does not retain the content of inference requests by default. I keep no copy and no log of it either. That choice was deliberate: several AI providers offer free access on the explicit condition that they may train on what you type, and I would not put your messages through one of those.
Talking to a person. If you choose "Talk to a person instead", the conversation has to be stored so that I can actually reply to it later — there is no way around that, and the chat window tells you at the moment you switch. Your messages and my replies are kept on my own server (Netlify, my hosting provider) for up to 7 days and then become unreachable. Your browser stores a reference to your conversation so that you can close the tab and still find my reply when you come back; clearing your browser data removes it. I am sent an email when a conversation starts. Nothing is shared with any third party beyond my hosting provider, and none of it is used for advertising.
Either way, please don't put sensitive personal details into the chat — for anything private, use WhatsApp or the contact form.
How I use it
- To reply to your enquiry and prepare your free mockup.
- To deliver and support your project if you decide to proceed.
- To keep records of my agreement and comply with legal obligations.
My lawful bases under UK GDPR are your consent (when you submit the form), taking steps to enter a contract at your request, and my legitimate interest in running and securing the business.
Who I share it with
I do not sell your data. I share it only with the service providers needed to operate:
- Netlify — hosts this website, and receives, stores and forwards your contact-form submissions to me.
- Stripe — handles payments if you engage me (Stripe collects payment details directly; I never see your full card number).
- Groq — processes messages you type into the on-page AI chat, solely to generate the reply. Nothing else you do on this site is sent there. I chose a provider whose terms bar it from training on what is sent; some free AI services do the opposite.
International transfers
The providers above (Netlify, Stripe, Groq) are based in the United States, so form submissions and payment records may be processed there. These transfers rely on safeguards recognised under UK GDPR — the UK Extension to the EU-US Data Privacy Framework and/or the UK International Data Transfer Agreement / standard contractual clauses — and each provider publishes its own GDPR commitments.
How long I keep it
Enquiries that don't become projects are kept for up to 12 months, then deleted. Records relating to actual projects and payments are kept for up to 6 years to meet UK tax and accounting requirements.
Your rights
Under UK GDPR you can ask me to access, correct, delete, or restrict use of your data, and to object to processing or request portability. To exercise any of these, contact me (below). You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Contact
For any privacy request, message me via the contact form or on Instagram at @brickworkstudio_.