Effective Date: 3 August 2026

Last Updated: 3 August 2026

Introduction

Welcome to Bonehead Design.

Bonehead Design is the trading name of Steven Davies-Evans, operating as a sole trader. Your privacy is important, and this Privacy Policy explains how your personal information is collected, used, stored and protected when you visit this website, contact us or use our services.

We are committed to processing personal information fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and any other applicable data protection legislation.

By using this website or contacting Bonehead Design, you acknowledge that you have read and understood this Privacy Policy.

Data Controller

For the purposes of UK data protection legislation, the Data Controller is:

Steven Davies-Evans trading as Bonehead Design

Email: hello@boneheaddesign.com

If you have any questions regarding this Privacy Policy or the way your personal information is handled, please contact us using the email address above.

Scope of this Policy

This Privacy Policy applies to:

• Visitors to the Bonehead Design website.

• Individuals who submit an enquiry through the website.

• Clients and prospective clients.

• Individuals who subscribe to future newsletters.

• Individuals who request or download free resources.

• Anyone who communicates with Bonehead Design by email.

This policy explains what information is collected, why it is collected, how it is used, who it may be shared with and the rights you have over your personal information.

Information We Collect

Depending on how you interact with Bonehead Design, we may collect the following personal information.

Information You Provide

When you submit an enquiry through our contact form or communicate with us by email, you may provide:

• Full name

• Business name

• Email address

• Telephone number (optional)

• Website address (optional)

• Project budget

• Services you are interested in

• Details about your business or project

• Any other information you choose to include within your enquiry

You should only provide personal information that is relevant to your enquiry or the services you require.

Information Collected Automatically

When you visit this website, certain technical information may be collected automatically. This may include:

• IP address

• Browser type and version

• Device information

• Operating system

• Pages visited

• Time spent on the website

• Referral source

• General location information derived from your IP address

This information is collected through cookies and analytics tools and is primarily used to improve website performance, understand visitor behaviour and enhance the overall user experience.

Future Marketing Information

Should Bonehead Design offer newsletters, downloadable resources or other marketing communications in the future, we may collect:

• Your name

• Your email address

This information will only be collected where you have chosen to provide it and, where required by law, have given your consent to receive marketing communications.

You may unsubscribe at any time using the unsubscribe link included within marketing emails or by contacting us directly.

How We Collect Your Information

Bonehead Design collects personal information in a number of ways, depending on how you interact with our website and services.

Information may be collected when you:

• Complete and submit the contact form on our website.

• Contact us directly by email.

• Request a quotation or enquire about our services.

• Engage our services as a client.

• Subscribe to future newsletters or marketing communications.

• Download free resources or guides that we may make available.

• Interact with our website through cookies and analytics technologies.

We only collect information that is relevant to providing our services, communicating with you, improving our website and meeting our legal obligations.

How We Use Your Information

The personal information you provide may be used for one or more of the following purposes:

• To respond to your enquiries.

• To provide quotations for our services.

• To communicate with you throughout a project.

• To create and deliver branding, graphic design and website design services.

• To issue invoices and maintain financial records.

• To improve the performance, usability and content of our website.

• To analyse website traffic and visitor behaviour.

• To send newsletters, updates or promotional material where you have chosen to receive them.

• To provide downloadable resources you have requested.

• To comply with legal, regulatory or tax obligations.

Bonehead Design will only use your personal information for the purposes for which it was collected unless we are legally permitted or required to use it for another compatible purpose.

Lawful Basis for Processing

Under the UK General Data Protection Regulation, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we rely on one or more of the following lawful bases.

Contract

Where you request our services or engage Bonehead Design to carry out work, we process your personal information because it is necessary to fulfil our contractual obligations.

This includes preparing quotations, communicating during a project, creating deliverables, issuing invoices and providing ongoing support where applicable.

Consent

Where you choose to subscribe to newsletters, receive marketing communications or download resources requiring your email address, we rely on your consent.

You may withdraw your consent at any time by following the unsubscribe instructions included within our communications or by contacting us directly.

Withdrawing consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Legitimate Interests

We may process certain information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests include:

• Responding to enquiries.

• Improving our website and services.

• Understanding visitor behaviour through website analytics.

• Preventing fraud or misuse of our website.

• Maintaining the security and reliability of our systems.

Where we rely on legitimate interests, we carefully consider and balance our business needs against your privacy rights.

Legal Obligations

In certain circumstances, we may process personal information where required to comply with legal or regulatory obligations.

This may include maintaining financial records, complying with tax legislation, responding to lawful requests from public authorities or meeting other legal responsibilities imposed upon our business.

Accuracy of Your Information

We take reasonable steps to ensure that the personal information we hold is accurate, complete and kept up to date.

If any of your information changes or you believe the information we hold is inaccurate, please contact us and we will update our records as soon as reasonably practicable.

Payments and Financial Information

Bonehead Design issues invoices directly to clients for agreed services.

Payments are accepted by bank transfer (BACS) only.

Bonehead Design does not collect, process or store debit card, credit card or online banking credentials through this website.

Invoices may contain payment details necessary to complete a bank transfer. Any financial records required for accounting, taxation or legal purposes are retained only for as long as required under applicable legislation.

Cookies

This website uses cookies to improve your browsing experience, understand how visitors use the website and help maintain the performance and security of our services.

Cookies are small text files stored on your device when you visit a website. Some cookies are essential for the website to function correctly, while others help us analyse website performance and visitor behaviour.

Where required by law, you will be given the opportunity to accept or manage non essential cookies through the cookie banner displayed when you first visit the website.

You can also manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the website.

Further information about the cookies used on this website can be found in our Cookie Policy.

Website Analytics

Bonehead Design uses website analytics to better understand how visitors interact with the website.

The information collected helps us improve website performance, user experience and the effectiveness of our content.

Analytics information is used in an aggregated form wherever possible and is not intended to identify individual visitors.

Google Analytics

This website uses Google Analytics to collect anonymous information about how visitors use the website.

Google Analytics may collect information including:

• Pages visited.

• Time spent on the website.

• Device type.

• Browser information.

• Approximate geographic location.

• Referral source.

• Website interactions.

This information helps us understand how visitors find and use our website so we can continually improve our content, services and overall user experience.

Google Analytics may use cookies to collect this information. You can manage your cookie preferences through the cookie banner presented when visiting the website.

Squarespace Analytics

As this website is hosted on Squarespace, we also use Squarespace Analytics.

Squarespace Analytics provides website performance data, visitor statistics and other technical information that helps us monitor website activity and improve functionality.

This information may include page views, visitor numbers, traffic sources, popular content and general engagement with the website.

Squarespace Analytics does not provide us with unnecessary personal information and is used solely to improve our website and services.

Third Party Service Providers

In order to operate our business effectively, Bonehead Design may use trusted third party service providers.

These providers may process personal information on our behalf where necessary to deliver their services.

Current providers include:

• Squarespace for website hosting and website functionality.

• Google for analytics and business services.

These providers process information in accordance with their own privacy policies and applicable data protection legislation.

Bonehead Design only works with service providers that we reasonably believe maintain appropriate standards of security and data protection.

Should additional providers be introduced in the future, this Privacy Policy will be updated where appropriate.

Sharing Your Information

Bonehead Design respects your privacy and will only share personal information where there is a legitimate reason to do so.

We do not sell, rent or trade personal information to third parties for marketing purposes.

Your information may only be shared in the following circumstances:

Service Providers

We may share information with trusted third party providers who support the operation of our business, website or services.

These providers may include:

• Website hosting providers.

• Analytics providers.

• Email service providers.

• Professional advisers where required.

These organisations are only permitted to process personal information where necessary to provide their services and are expected to handle information securely and in accordance with applicable data protection laws.

Legal Requirements

We may disclose personal information where required to do so by law, regulation, court order or where necessary to protect our legal rights, property, safety or the safety of others.

Business Changes

If Bonehead Design is involved in a future business restructure, merger, sale or transfer of assets, personal information may be transferred as part of that process where legally permitted.

Where this occurs, reasonable steps will be taken to ensure your information continues to receive appropriate protection.

International Data Transfers

Some of the third party services used by Bonehead Design may process information outside the United Kingdom.

Where personal information is transferred internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with UK data protection legislation.

These safeguards may include:

• Transfers to countries recognised as providing an adequate level of data protection.

• The use of approved contractual protections.

• Other lawful transfer mechanisms permitted under UK GDPR.

Data Security

Bonehead Design takes reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

These measures include:

• Using trusted website and technology providers.

• Maintaining appropriate account security practices.

• Limiting access to personal information where appropriate.

• Keeping software and systems reasonably secure and updated.

• Taking care when handling client information and project materials.

While we take appropriate steps to protect your information, no method of online transmission or electronic storage can be guaranteed to be completely secure.

You should also take appropriate steps to protect your own information, including using secure passwords and avoiding sharing sensitive information through unsecured channels.

Data Retention

Bonehead Design only retains personal information for as long as necessary for the purposes it was collected, including meeting legal, accounting and reporting requirements.

The length of time information is retained depends on the nature of the information and why it is held.

Examples include:

Enquiry Information

Information submitted through the website or by email may be retained for a reasonable period after our last communication in case further contact is required or to maintain a record of enquiries.

Client Information

Information relating to completed projects, including communication records, invoices and relevant project documentation, may be retained for as long as necessary to fulfil contractual, accounting and legal obligations.

Marketing Information

Where you have subscribed to newsletters or marketing communications, your information will be retained until you unsubscribe or request removal.

When personal information is no longer required, it will be securely deleted or anonymised where appropriate.

Your Data Protection Rights

Under the UK General Data Protection Regulation, you have certain rights relating to the personal information we hold about you.

These rights include:

The Right to Access

You have the right to request a copy of the personal information we hold about you and information about how we process it.

The Right to Rectification

You have the right to request that inaccurate or incomplete personal information is corrected.

The Right to Erasure

You have the right to request that we delete your personal information in certain circumstances.

Please note that this right is not absolute and we may be required to retain certain information where we have a legal obligation to do so.

The Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain circumstances.

The Right to Object

You have the right to object to certain types of processing, including processing based on legitimate interests and direct marketing.

The Right to Data Portability

Where applicable, you have the right to request your personal information in a structured, commonly used and machine readable format, or request that it is transferred to another organisation.

The Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.

Withdrawing consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Exercising Your Rights

If you would like to exercise any of your rights, please contact:

Steven Davies-Evans trading as Bonehead Design

Email: hello@boneheaddesign.com

We may need to verify your identity before completing a request to ensure that personal information is not disclosed to an unauthorised person.

We aim to respond to all legitimate requests within one month. In some circumstances, such as where requests are complex or numerous, this timeframe may be extended where permitted by law.

Children's Privacy

Bonehead Design's website and services are intended for businesses and individuals aged 18 or over.

We do not knowingly collect personal information from children.

If you believe that a child has provided personal information through this website, please contact us and we will take reasonable steps to remove that information.

Third Party Websites

This website may contain links to third party websites or services that are not operated or controlled by Bonehead Design.

While we aim to only link to reputable and trusted sources, we are not responsible for the privacy practices, security or content of external websites.

We recommend reviewing the privacy policies of any third party websites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal requirements.

Any updates will be published on this page with a revised "Last Updated" date.

Where significant changes are made, we may take additional steps to notify users where appropriate.

Contact Information

If you have any questions, concerns or requests regarding this Privacy Policy or how your personal information is handled, please contact:

Steven Davies-Evans trading as Bonehead Design

Email: hello@boneheaddesign.com

We aim to respond to privacy enquiries as quickly as possible and will always work to handle your information responsibly.

Complaints

If you believe that your personal information has not been handled correctly, please contact us first so we can investigate and attempt to resolve your concerns.

You also have the right to raise a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

The ICO is the independent authority responsible for upholding information rights and enforcing data protection law in the United Kingdom.