Privacy Policy
This policy explains what personal data Visulis Ltd collects through this website and in the course of our work, why we collect it, how long we keep it and what rights you have over it. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
- Data controller
- Visulis Ltd
- Company number
- 17366573
- Registered in
- England & Wales
- Registered office
- 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- ICO registration
- Registered with the Information Commissioner's Office as Visulis Ltd, reference ZC211524
- Data protection contact
- privacy@visulis.com
1. What we collect
Information you give us
When you use the enquiry form on this site, we collect the name, email address, project type and message you submit. The form also contains a hidden field used purely to detect automated spam submissions; it is not used to profile you.
If you contact us by email or Telegram, we hold the contents of that correspondence and your contact details.
If you become a client, we hold the information needed to deliver and invoice the work — typically a contact name, business name, billing address, email address and any project materials, credentials or brand assets you choose to share with us.
Information collected automatically
Our hosting provider records standard server logs for every visit, which include your IP address, the date and time of the request, the page requested, your browser type and referring page. These logs are generated for security and reliability purposes.
This site does not use analytics, advertising or tracking cookies, and does not build visitor profiles.
2. Why we use it, and our lawful basis
| What we do | Data used | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Reply to your enquiry and prepare a quote | Name, email, project type, message | Steps taken at your request prior to entering a contract (Art. 6(1)(b)); legitimate interests in responding to business enquiries (Art. 6(1)(f)) |
| Deliver a project you have engaged us for | Contact, project and account details | Performance of a contract (Art. 6(1)(b)) |
| Issue invoices and keep accounting records | Billing details, transaction records | Legal obligation under UK tax and company law (Art. 6(1)(c)) |
| Keep the site secure and prevent spam or abuse | Server logs, IP address, spam-trap field | Legitimate interests in protecting our systems (Art. 6(1)(f)) |
| Show work we have produced in our portfolio | Client name, brand assets and deliverables | Legitimate interests in promoting our services, subject to any confidentiality terms agreed with the client (Art. 6(1)(f)) |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects. We do not sell personal data, and we do not send marketing emails to people who have simply made an enquiry.
3. Who we share it with
We share personal data only where it is necessary to run the business, and only with providers who are themselves bound to protect it:
- Hosting and email provider — Hostinger, which hosts this website and processes the enquiry emails sent through the form.
- Google (Fonts and YouTube) — see section 8 and our Cookie Policy.
- Accountants, payment providers and other professional advisers — where needed to invoice, take payment, file accounts or take legal advice.
- Subcontractors — where a specialist is engaged on your project, and only to the extent needed to do that work.
- Regulators, law enforcement or courts — where we are legally required to disclose information.
Where a provider processes personal data on our behalf, we put a written processing agreement in place as required by Article 28 of the UK GDPR.
4. International transfers
Some of our providers are based outside the UK, or process data on servers outside the UK. Where personal data is transferred internationally, we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards required.
Loading Google Fonts and viewing a YouTube video embedded on this site involves your IP address being sent to Google, which operates infrastructure in the United States. You can avoid the YouTube transfer entirely by not clicking to play an embedded video.
5. How long we keep it
| Data | Retention period |
|---|---|
| Enquiries that do not become projects | Up to 12 months from last contact, then deleted |
| Client project records and correspondence | For the life of the engagement plus 6 years, to cover the limitation period for contract claims |
| Invoices and accounting records | 6 years from the end of the accounting period, as required by the Companies Act 2006 and HMRC rules |
| Server logs | As retained by our hosting provider, typically a short rolling window |
When a retention period ends, we delete the data or anonymise it so it can no longer identify you.
6. Security
This site is served over HTTPS. Enquiry submissions are validated server-side and are sent to a mailbox on our own domain rather than stored in a public-facing database. Access to client materials, accounts and credentials is limited to the people who need it, and protected by strong, unique passwords and two-factor authentication where the provider supports it.
No method of transmission over the internet is completely secure. Please do not send passwords, private keys, seed phrases or other secrets through the enquiry form — if a project needs credentials, we will agree a secure method of sharing them with you.
7. Your rights
Under the UK GDPR you have the right to:
- be told how your data is used — which is what this policy is for;
- request a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete data where there is no continuing reason for us to hold it;
- ask us to restrict how we use your data while a concern is resolved;
- receive data you gave us in a portable, machine-readable format, or have it sent to another controller;
- object to processing carried out on the basis of our legitimate interests; and
- withdraw consent at any time, where we have relied on consent.
To exercise any of these rights, email privacy@visulis.com. We will respond within one month. There is normally no charge, and we may ask you for information to confirm your identity before we act on a request.
8. Cookies and embedded content
Visulis does not set its own cookies and does not use analytics or advertising trackers. However, this site loads fonts from Google Fonts, shows video thumbnails hosted by YouTube, and embeds a YouTube player when you click to watch a project video — and those third parties may set cookies or receive your IP address. Full detail is in our Cookie Policy.
9. Children
This site and our services are aimed at businesses and adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy as our services or the law change. The version number and date at the top of this page show when it was last revised. Material changes affecting existing clients will be notified by email.
11. How to complain
If you are unhappy with how we have handled your personal data, please contact us first at privacy@visulis.com so we can try to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator:
- Regulator
- Information Commissioner's Office
- Address
- Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Helpline
- 0303 123 1113
- Website
- ico.org.uk/make-a-complaint