Privacy notice.
Short version: we keep what you send us, we don't sell it, and you can ask us to delete it any time. The long version follows.
Who we are
This privacy notice is issued by Blackgeek Ltd ("Blackgeek", "we", "us"), a private limited company registered in England and Wales under company number 07337347, VAT registration GB 133 3206 57. Our registered office is 10 Riverside Business Park, Lyon Road, London SW19 2RL, United Kingdom.
We are the data controller for the personal data described in this notice. The notice explains what we collect when you visit blackgeekltd.com, send us a brief, or write to us, and what rights you have under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
If you have any question about how we handle your data, write to [email protected] with "Privacy" in the subject line.
What we collect
- Brief form (contact page). Your name, work email, organisation (optional), role, the problem you described, a budget range, a timing note, and an optional referral note. Nothing else.
- Email correspondence. If you write to [email protected] or [email protected] we keep the thread for as long as the conversation is live, plus the period explained below.
- Server logs. Our web server keeps standard access logs (IP address, user-agent, requested path, timestamp) for up to 14 days for diagnostics and abuse mitigation.
- No tracking cookies. The site sets no analytics or advertising cookies. The only client-side storage is a local preference key for our visual "Tweaks" panel — it never leaves your browser.
Lawful bases
- Brief form & correspondence: processing is necessary for steps taken at your request to enter into a contract (UK GDPR Art. 6(1)(b)), or our legitimate interest in responding to enquiries (Art. 6(1)(f)).
- Server logs: our legitimate interest in keeping the site secure and operational (Art. 6(1)(f)).
How long we keep it
- Briefs you send: kept for up to 24 months from your last message, then deleted. If a brief leads to an engagement, the project file is retained for the duration of the engagement plus 6 years (UK contract limitation period).
- Server logs: 14 days rolling, then overwritten.
- Email threads: archived after 24 months of inactivity.
Who we share with
We do not sell or rent your data. We do use a small number of processors strictly to run the studio:
- Cloudflare — CDN, edge security, and email routing. Traffic to the site is proxied through Cloudflare; routed mail transits Cloudflare Email Routing.
- Hetzner Online GmbH — hosts the web server (datacentre in Germany).
- Brevo (formerly Sendinblue) — used only for transactional email replies when applicable; never for marketing campaigns to you.
All processors are bound by data-processing agreements appropriate to UK GDPR.
International transfers
Hetzner data centres are in the EU. Cloudflare may route traffic through edge locations outside the UK/EU under standard contractual clauses. Brevo is EU-based.
Your rights
Under UK GDPR you can ask us to: confirm what we hold about you; correct or delete it; restrict or object to processing; receive a portable copy; or withdraw consent where it was the basis. Write to [email protected] with "Subject Access Request" in the subject line. We respond within one calendar month.
If you're unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
Children
The site and our services are not directed to anyone under 18. We do not knowingly collect data from children.
Changes to this notice
If we change this notice substantively we will date the new version and, where the change affects existing relationships, write to you directly.
Data controller details
For the purposes of UK GDPR, the data controller is:
- Blackgeek Ltd
- Company number: 07337347 (registered in England & Wales)
- VAT registration: GB 133 3206 57
- Registered office: 10 Riverside Business Park, Lyon Road, London SW19 2RL, United Kingdom
- Email: [email protected]
We are not currently required to designate a statutory Data Protection Officer under UK GDPR; data-protection matters are handled by the partners directly. If you would prefer to write to a specific partner, indicate so in your message.
Questions about your data?
Email us — a partner reads every message. Plain English, no template replies.
[email protected] →