Privacy Policy

1. Introduction

Purple Build Studio Ltd (“Purple”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at purple.law or engage with our services.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide to Us

• Identity Data: Name, job title, and professional role
• Contact Data: Email address, telephone number, and business address
• Professional Data: Company name, practice areas, and professional interests
• Communication Data: Correspondence, meeting notes, and project requirements
• Marketing Preferences: Your preferences for receiving communications from us

2.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use our website, including pages visited, time spent on pages, and navigation paths
• Device Data: Information about the device you use to access our website

2.3 Cookies and Similar Technologies

We use Google Analytics to understand how visitors interact with our website. This service uses cookies to collect information about your use of our website, including your IP address (anonymised), browser type, referring/exit pages, and the dates/times of your visits.

You can control cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

3. Legal Basis for Processing

Under UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms.

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide information about our services
• To deliver our consultancy and technology development services
• To manage our relationship with you, including sending service updates
• To send you marketing communications where you have consented or where we have a legitimate interest to do so
• To improve our website, services, and user experience
• To analyse website usage and performance through Google Analytics
• To comply with legal and regulatory obligations
• To protect our rights, property, or safety, and that of our clients and others

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data with:

• Service Providers: Third-party companies that help us operate our business (e.g., hosting providers, email services, analytics providers). These providers are contractually bound to protect your data.
• Professional Advisers: Lawyers, accountants, and other professional advisers as necessary.
• Legal Requirements: Where required by law, court order, or regulatory authority.
• Business Transfers: In connection with any merger, acquisition, or sale of company assets.

Third-Party Services We Use

• Google Analytics: Website analytics (data may be transferred to Google servers in the US under appropriate safeguards)
• Vercel: Website hosting

6. International Data Transfers

Some of our service providers may be located outside the UK or European Economic Area (EEA). Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Transfers to countries with an adequacy decision from the UK government
• Standard Contractual Clauses approved by the UK Information Commissioner
• Other appropriate safeguards as permitted under UK GDPR

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Our general retention periods are:

• Client data: Duration of engagement plus 7 years (for legal and accounting purposes)
• Enquiry data: 2 years from last contact unless you become a client
• Marketing data: Until you withdraw consent or opt out
• Website analytics: 26 months (Google Analytics default)

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure hosting with reputable providers
• Access controls and authentication measures
• Regular security reviews and updates
• Staff training on data protection

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at hello@purple.law. We will respond to your request within one month, as required by law.

We may need to verify your identity before processing your request. There is no fee for most requests, but we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

10. Marketing Communications

We may send you marketing communications about our services, insights, and events where you have consented or where we have a legitimate interest to do so (for example, if you are an existing client or have made an enquiry).

You can opt out of marketing communications at any time by:

• Clicking the “unsubscribe” link in any marketing email
• Contacting us at hello@purple.law

Opting out of marketing will not affect service-related communications necessary to deliver our services to you.

11. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the “Last updated” date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

14. Complaints

If you have any concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have any concerns about how we process your personal data, please contact us: