Legal

Privacy Notice

Effective from 2026 · Olive Branch Design Ltd

1. Who We Are

Olive Branch Design Ltd ("we", "us", "our") provides freelance website development, graphic design, branding, and digital content services. We also operate:

  • tomattwood.me
  • NeuroNews
  • CrossShaped.com

We are the data controller for all personal data collected through our websites and services.

Contact: admin@tomattwood.me

2. Data We Collect

Identity Data

  • Name
  • Username
  • Profile information

Contact Data

  • Email address
  • Phone number
  • Billing address (future purchases)

Technical Data

  • IP address
  • Browser type
  • Device information
  • Cookies
  • Analytics identifiers

Usage Data

  • Pages visited
  • Time on site
  • Interactions
  • Referring URLs

Communication Data

  • Emails
  • Form submissions
  • Social media messages

Newsletter & Subscription Data

  • Email address
  • Consent records
  • Subscription preferences

Client Project Data

  • Design briefs
  • Assets
  • Reference materials
  • Project notes

Payment Data (Future Stripe Purchases)

  • Transaction IDs
  • Billing details
  • We never store full card numbers

Comment Data (If Enabled)

  • Name
  • Email
  • Comment content

3. How We Collect Data

  • Website forms (Svelte + Vercel)
  • Newsletter sign-ups
  • Blog subscription widgets
  • Social media messages
  • Stripe checkout (future)
  • Cookies and analytics tools
  • Email enquiries

4. Why We Use Your Data (Lawful Bases)

Contract

  • To provide design services
  • To process payments
  • To respond to enquiries

Consent

  • Newsletters
  • Blog updates
  • Marketing communications
  • Social media advertising audiences
  • Non-essential cookies

Legitimate Interests

  • Website security
  • Analytics (with consent)
  • Comment moderation
  • Portfolio case studies (anonymised unless agreed otherwise)

Legal Obligation

  • Accounting
  • Tax
  • Compliance

5. Sharing Your Data

We share data only with trusted providers:

  • Vercel (hosting)
  • Railway (backend)
  • Stripe (payments)
  • Email marketing provider
  • Analytics providers
  • Social media platforms

We never sell your data.

6. International Transfers

Some providers may store data outside the UK. We ensure safeguards such as:

  • UK Addendum to Standard Contractual Clauses (SCCs)
  • Adequacy decisions

7. How Long We Keep Your Data

See the full Data Retention Policy.

8. Your Rights

You may request:

  • Access
  • Correction
  • Deletion
  • Restriction
  • Portability
  • Withdrawal of consent
  • Objection to marketing

Contact: admin@tomattwood.me

9. Complaints

You may contact us or the ICO. See the Complaints Process.

10. Cookies

See the Cookie Policy.

11. Updates

We update this notice when laws or systems change.