Privacy policy

We are Graffic, a design business operated by Conor and James Rafferty. If you have any questions about this notice, or about how we use your personal data, please contact us at info@grafficbelfast.com or by post at 27 Glantane Dr, Belfast BT15 3FE.

We collect and use personal data about you, and about the people we deal with on your project, including:

• your name, and the names of your contacts;
• contact details, such as your email address, phone number and address;
• information about your project and the instructions you give us, including what you send through our enquiry form and any images you attach;
• billing and payment information;
• our correspondence with you; and
• if you agree to analytics cookies, information about how you use our website (see section 10).

We use your personal data to:

• carry out the work and manage and track your project — to perform our contract with you;
• prepare and send invoices, and send payment reminders (which may be automated) — to perform our contract with you and for our legitimate interests in being paid and running our business;
• keep proper business and accounting records — to meet our legal obligations;
• respond to your enquiries, questions and any complaints — for our legitimate interests in managing our work and our relationship with you;
• understand how our website is used, so we can improve it — with your consent, which you give through our cookie banner.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and have concluded that they are not.

We may send payment reminders automatically when an invoice is due or overdue. These reminders are routine administration and do not involve any automated decision that produces legal effects for you or similarly significantly affects you.

Your personal data is stored in a database on secure servers provided by our hosting provider, Hostinger, which stores the data on our behalf under terms that require it to keep the data secure. These servers are located in England, with backup servers in Germany. We take reasonable technical and organisational measures to protect your personal data. If you agree to analytics cookies, information about your use of our website is stored by Google on its servers, which may be outside the UK (see section 10). Where personal data is stored or processed outside the UK, we make sure that appropriate safeguards are in place as required by data protection law.

We do not sell your personal data. We only share it where necessary: with our hosting provider, which stores it for us; with Google, which provides our website analytics if you agree to analytics cookies; with our professional advisers, such as our accountant, where they need it; and where we are required to share it by law, or to establish, exercise or defend legal claims.

We keep your personal data for as long as we are working with you and for a reasonable period afterwards. We keep billing and accounting records for as long as the law requires (normally six years), and we may keep other information for longer where we need it to deal with queries or disputes.

Under data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your personal data;
• ask us to restrict how we use it;
• object to certain uses of it; and
• ask us to transfer certain data to you or to another provider.

Where we rely on your consent for anything, you can withdraw that consent at any time. To exercise any of these rights, please contact us using the details in section 1. We will respond within the time limits set by law.

If you are unhappy with how we have handled your personal data, please contact us first so that we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.

Cookies are small files a website stores in your browser. We only set the cookies we need for the site to work, unless you tell us you are happy for us to use analytics cookies as well. We do not use advertising cookies.

Cookies we always use, because the site needs them:

• graffic_consent — remembers whether you accepted or declined analytics cookies, so we do not ask on every page. It lasts six months, after which we ask again.
• PHPSESSID — set only when you open our enquiry form, to protect it against forged submissions. It is deleted when you close your browser.

Cookies we only use if you click “Accept”:

• _ga — set by Google Analytics to tell visits from different browsers apart. It lasts two years.
• _ga_ followed by an ID — set by Google Analytics to keep track of the current visit. It lasts two years.

Google Analytics tells us which pages are visited, roughly where visitors are (to country or city level), what device and browser they use, and how they found us. Google does not store your full IP address in Google Analytics, and we have not turned on Google’s advertising features, so this information is not used to show you adverts. Google Ireland Limited provides the service for us under its data processing terms. Google may process this information in the United States, under the UK Extension to the EU–US Data Privacy Framework. Google Analytics keeps this information for two months before deleting it.

Our legal basis for analytics cookies is your consent. If you decline, Google Analytics is not loaded at all. You can change your mind at any time using the “Cookie settings” link at the bottom of every page. If you withdraw your consent, we stop using analytics and delete the analytics cookies from your browser. You can also block or delete cookies in your browser settings.

We may update this notice from time to time. The latest version will be available on this page, and we will show the date it was last updated.