Privacy Policy

Last updated: March 2026

Who we are

Lovell Creative is a freelance graphic design studio operated by Ross Lovell. We provide brand identity, logo design, campaign design, and general creative services to direct clients and agencies.

For any data-related queries, contact: ross@lovellcreative.co

What data we collect and why

We collect and use personal data only where it is necessary to deliver our services or to take steps prior to entering a working relationship.

Brand and logo projects – When you complete a brand design questionnaire or design brief, we collect your name, business name, contact details, and the information you provide about your organisation, audience, and creative preferences. This is used solely to inform the design work we carry out for you.

General design and campaign work – For ongoing or project-based design commissions, we may collect your name, job title, business name, contact details, and project-specific information shared during briefings, calls, or correspondence. This is used to manage and deliver the project, issue invoices, and maintain a working record of the engagement.

Agency and freelance engagements – When working with agencies as a freelance resource, we collect contact details for the relevant individuals we work with, along with any project information necessary to complete the commission. We may also hold basic financial and contractual details required to invoice and formalise the engagement. In some cases, we may act as a data processor on behalf of the agency where they are the data controller – in which case the agency’s own privacy terms will also apply to that engagement.

Website enquiries – If you contact us through the website, we collect the information you provide in order to respond to your enquiry. This data is not used for any other purpose.

Lawful basis for processing – In most cases, we process personal data on the basis of contract performance or pre-contractual steps taken at your request (Article 6(1)(b) of UK GDPR). Where you have provided information voluntarily in advance of any formal engagement, we rely on legitimate interest (Article 6(1)(f)), having assessed that this does not override your rights and interests as an individual.

We do not process any special categories of personal data.

What we do not do

We do not sell, rent, or share your personal data with third parties for marketing or any unrelated purpose. We do not use your data for automated decision-making or profiling.

Tools, services, and international transfers

This website is built and hosted on Squarespace. Squarespace acts as a data processor on our behalf for the purpose of hosting and delivering the site. As a US-based company, data processed through Squarespace may be transferred outside the UK. Squarespace maintains Standard Contractual Clauses and other appropriate safeguards for such transfers in accordance with UK GDPR requirements. For full details, see the Squarespace Privacy Policy.

Where we use any additional third-party tool to receive or transmit data on our behalf – for example, a form submission or email delivery service – we ensure that appropriate data processing terms are in place and that any international transfers are covered by adequate safeguards. We will update this notice if any such tools are introduced or changed.

Cookies and website analytics

Our website uses cookies – small text files placed on your device when you visit – to help the site function and to understand how it is used. In addition to cookies, our website may use web beacons, which are small invisible elements that help us understand how pages are used. These are subject to the same consent controls as analytics cookies.

Strictly necessary cookies are set automatically. They are essential for the site to operate correctly and do not require your consent.

Analytics cookies are only set with your permission. We use Squarespace’s built-in analytics to understand how visitors find and navigate our site. This data is aggregated and does not identify you personally. If you decline analytics cookies, your visit will not be included in these statistics.

We do not use advertising cookies or any third-party tracking tools beyond those listed here.

You can accept or decline non-essential cookies when you first visit the site. You can withdraw or change your preference at any time by clearing your browser cookies and revisiting.

A note on Google Analytics: we are not currently using Google Analytics. If this changes, this notice will be updated before any such tracking is enabled.

Data security

We take reasonable steps to protect the personal data we hold against unauthorised access, loss, or disclosure. Data shared with us electronically is handled with care. However, no method of transmission over the internet can be guaranteed as completely secure, and we cannot accept liability for unauthorised access beyond our reasonable control.

Children’s data

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

How long we keep your data

We retain project-related data for the duration of the engagement and for up to 24 months afterwards, to allow for follow-up queries or repeat work. Financial records – including invoices and contracts – are kept for seven years in line with HMRC requirements. Data that is no longer needed is securely deleted.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request that inaccurate or incomplete data is corrected

  • Request that your data is deleted, where we have no legal obligation to retain it

  • Object to or restrict our processing of your data

  • Request a portable copy of the data you have provided to us

  • Withdraw consent, where consent is the basis for processing

To exercise any of these rights, contact ross@lovellcreative.co. We will acknowledge your request promptly and respond in full within one calendar month.

If you raise a privacy concern with us, we will investigate and respond to you directly. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this notice

We may update this notice from time to time to reflect changes in our services, tools, or legal obligations. The date at the top of this page will always reflect when it was last revised. Where changes are significant, we will take reasonable steps to bring them to your attention.