Last updated: 21 September 2026.
Who we are
Design Superheroes Ltd is the data controller for this website. We are registered in England and Wales under company number 07696302, and our registered office is 49 Park Crescent Road, Brighton, East Sussex BN2 3HS. For any question about this notice or your personal data, contact gs@designsuper.co.
What we collect, and why
Enquiries
When you use the contact form we collect your name, your email address, whatever you tell us about your project, and your confirmation that you are happy for us to reply. We use this only to respond to you and to discuss the work. We do not use it for marketing, we do not add you to a mailing list, and we do not sell it.
Enquiries are not stored in this website’s database. The form sends them by email, through Brevo, to our Google Workspace mailbox, so the copy we keep is that email. Brevo keeps a record of the delivery for a limited period.
If you contact us on WhatsApp instead, that conversation is carried by WhatsApp (part of Meta) under its own terms and privacy policy.
If you book a call, the booking is handled by Reclaim.ai, which receives the name, email and any notes you enter, and adds the meeting to our Google Calendar.
Contact form statistics
The contact form keeps simple, anonymous statistics about its own use: whether it was seen, how long it was open, and which fields were used. It never records what you type, it is not linked to you or your IP address, and it stores nothing on your device. We use it only to check that the form is working.
If we contact you about our services
We sometimes email businesses that we think could use our services. For this we only use business contact details that a business has published itself, for example on its own website. We email business addresses at limited companies and limited liability partnerships, never personal email addresses. We hold your name, your role, your work email address and your company’s details, with a note of when we contacted you and whether you replied.
Every email we send says who we are and includes a simple way to opt out. If you opt out, or ask us to stop, we will not contact you again. To make sure of that, we keep your email address on a suppression list and nothing else.
Analytics
With your consent we use Google Analytics 4 to understand how the site is used — which pages get read, how visitors arrive, and roughly which country they are in. This is aggregated reporting, not an attempt to identify you, and we have not enabled Google Signals, advertising features or cross-device tracking.
Google’s tags are held back until you choose. If you decline analytics, or simply never answer the banner, the tags stay switched off and no analytics cookies are set.
Your cookie choice
When you answer the cookie banner we store your choice in a cookie in your browser so the site does not ask again on every page. That record stays on your device — we do not keep a server-side log of who consented to what.
Delivering the site
Every visit passes through Cloudflare, which delivers the site quickly and protects it from attacks, and is then served by our host, SiteGround. Both necessarily see your IP address and the details of each request, such as the page asked for and your browser type, and keep short-lived logs for security and for diagnosing faults. These are not used to build any profile of you.
To keep pages fast, our caching software occasionally measures how a page lays out in your browser and sends that measurement back to our own server. It collects no personal information and stores nothing on your device.
Apart from Cloudflare, nothing on this site loads from another company unless you accept analytics or open the call booking calendar, which loads from Reclaim.ai only when you choose to book. The weather on the homepage and our tree-planting figures from Ecologi are fetched by our server, so your browser never contacts those services. There are no user accounts, no comment form, and no embedded video, maps or social feeds.
Lawful basis
- Consent for analytics cookies, and for contacting you about an enquiry you have sent us. You can withdraw either at any time.
- Legitimate interests for delivering the site securely and reliably, checking that the contact form works, keeping business records of work discussed or carried out, and emailing businesses about our services. You can object to those emails at any time, and we will stop.
Who else sees it
- Cloudflare — delivers and protects the site. Processes your IP address and request details on every visit.
- SiteGround — hosting. Necessarily processes anything stored on or passing through the server, including access logs.
- Brevo (formerly Sendinblue) — delivers the email your enquiry is sent in, and the emails we send to businesses.
- Reclaim.ai — handles call bookings. Receives the details you enter when you book, and loads the booking calendar when you open it.
- Google — hosts our email (Google Workspace), so it holds your enquiry once it arrives, and processes analytics data if you have consented to analytics.
We do not share your details with anyone else. Where these providers process data outside the UK, they do so under the safeguards required by UK data protection law, such as the UK–US data bridge, the International Data Transfer Addendum or an adequacy decision.
How long we keep it
- Enquiries — up to two years from our last contact with you, then deleted. If you become a client, we keep what we need for the business record instead.
- Business contact details — if you have not replied, up to 12 months after we last emailed you, then deleted. If you reply, we keep the conversation as we would an enquiry. If you opt out, we keep only your email address, so that we never contact you again.
- Analytics — 14 months, as set in Google Analytics.
- Your cookie choice — 12 months, after which the banner asks again.
- Server and security logs — kept by Cloudflare and our host on their own short rolling schedules.
Your rights
Under UK data protection law you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to how we are using it, or ask us to restrict its use. If we have emailed you about our services, you can object at any time and we will stop straight away. You can withdraw consent at any time; for analytics, use cookie settings, which is also linked at the bottom of every page. To exercise any of these rights, email gs@designsuper.co and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
Which cookies this site sets, and how to change your choices, is set out in our cookie policy.