Legal
Privacy Notice
How Daedalus Design collects, uses and protects personal data.
Last updated: 23 August 2026
Who we are
Daedalus Design is operated by Daedalus Design, the data controller for the personal data described in this notice.
- Email: hello@daedalusdesign.co.uk
- Data protection enquiries: privacy@daedalusdesign.co.uk
- Postal address: 1 Galltfaenan Cottages, Trefnant, Denbigh, LL16 5AG
What we collect, and why
| Source | What | Why | Lawful basis |
|---|---|---|---|
| Contact form | Your name, email address and the message you send. | To reply to your enquiry. | Legitimate interests — responding to someone who has contacted us. |
| Email correspondence | Whatever you choose to put in an email to us. | To handle your query and keep a record of what was agreed. | Legitimate interests — running the business and keeping records. |
| Server logs | IP address, timestamp, page requested, browser user-agent. | To keep the site running, diagnose faults and detect abuse. | Legitimate interests — operating a secure service. |
| Orders and billing | Name, billing address, email and order details. | To provide the service you bought, invoice you and meet tax obligations. | Performance of a contract, and legal obligation for tax records. |
How long we keep it
- Enquiries and correspondence: up to 24 months from our last exchange, then deleted.
- Server logs: a short rolling window, typically no more than 30 days.
- Orders, invoices and tax records: six years, as required by HMRC.
Who we share it with
We do not sell your personal data and we do not share it for anyone else’s marketing. We use a small number of suppliers who process data on our behalf under contract:
- Our hosting provider, to run the servers this site sits on.
- Our email provider, to send and receive mail.
- Our billing and payment providers, to take payment and issue invoices.
We may disclose information where the law requires it, or to establish or defend legal claims.
Where your data is held
Our servers are located in the United Kingdom and the European Economic Area. Where a supplier processes data outside the UK, we rely on the UK Government’s adequacy regulations or on International Data Transfer Agreements.
Payments
Payments are processed by our payment provider. We never see or store your full card details — those go directly to the provider, who acts as an independent controller for the payment itself. We keep the order record and invoice, which we are required to retain for six years under UK tax law.
Your rights
Under the UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete data, where we have no continuing reason to keep it;
- object to processing carried out on the basis of legitimate interests;
- ask us to restrict processing while a dispute is resolved;
- receive data you gave us in a portable format;
- withdraw consent at any time, where consent is the basis we rely on.
Email privacy@daedalusdesign.co.uk to exercise any of these. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or by phone on 0303 123 1113.
Changes
If we change how we handle personal data we will update this page and change the date at the top. Material changes will be flagged on the site.