Summary
Bang Creations is a product design consultancy. This site has one interactive feature: an enquiry form. If you do not use it, and you do not accept cookies, we keep nothing about you.
This policy explains what we collect when you get in touch, why we are allowed to use it, how long we keep it, and what you can ask us to do about it.
Who we are
Bang Creations Limited is the controller of the personal information described here. We are registered in England and Wales, company number 04576553, with our registered office at 56b High Street, Haslemere, Surrey, England, GU27 2LA.
We are registered with the Information Commissioner’s Office, registration number ZB274455.
You can reach us through our contact page or by writing to us at the address above.
What we collect, and when
When you send us an enquiry. The form asks for your first name, last name, email address and telephone number, and all four are required: the form will not send without them. It also asks what your idea is, how far along it is, and how you heard about us, and those three are optional.
Automatically, to keep the form usable. When you submit the form we use your IP address to limit how many submissions can come from one source, and it is sent to Google as part of the reCAPTCHA check described below. We do not write it to any log we keep, and it is not included in your enquiry.
If you accept cookies. Cookies for analytics and advertising are set only if you choose to accept them. Every cookie is listed by name in our cookie policy.
We do not run accounts, newsletters, orders or payments on this site, and we never ask you for payment details.
Why we use your information, and our lawful basis
| What we use it for | Our lawful basis |
|---|---|
| Replying to your enquiry and the conversation that follows | Legitimate interests, and where you are asking about engaging us, taking steps at your request before entering a contract |
| Stopping the enquiry form being used for automated spam and abuse | Legitimate interests |
| Understanding how the site is used, through analytics | Your consent |
| Measuring the performance of our advertising | Your consent |
| Remembering the cookie choice you made | Legitimate interests, so that we can honour it |
Our legitimate interests are running a design consultancy and answering the people who contact us, keeping the enquiry form working and our systems secure, and honouring the cookie choice you made rather than asking on every page. In each case the information involved is limited and used for nothing else, and we have concluded that our interest is not outweighed by your rights. You can object to any of them, and you can ask us how we reached that conclusion.
Where we rely on your consent you can withdraw it at any time, and withdrawing it is as easy as giving it: use the Cookie preferences link in the footer of any page.
Cookies
Our cookie policy lists every cookie, and every other item stored on your device, by name, purpose, provider and duration.
Nothing for analytics or advertising loads until you accept it. If you take no action, or you decline, Google’s tag is never requested.
Your cookie choice is stored in a cookie on your own device, and we keep no record of who accepted and who declined. Like any cookie it is sent to our web host with each page you request; nothing there reads or stores it.
Spam protection on our enquiry form
The enquiry form is protected by reCAPTCHA, a service provided by Google that tells a genuine enquiry from an automated one. It does not load when you simply visit the contact page; it loads when you start filling in the form. Once it loads, Google receives your IP address and information about how you interact with the form, and may store or read information on your device. Everything it stores is named in our cookie policy.
Google processes this on our behalf, as our processor, under the Google Cloud Terms of Service, the Cloud Data Processing Addendum and the reCAPTCHA Service Specific Terms. The processing involves transferring your information outside the UK, covered as described below.
Alongside reCAPTCHA we use three checks that do not involve Google: a limit on how many submissions one IP address can make in an hour, hidden fields that a person never sees, and a check on how long the form was open before it was sent. A submission that fails any of these checks is refused automatically. That has no legal effect on you, and you can still reach us: our email address and telephone number are on the contact page.
Who we share your information with
We never share your information with third parties for them to market to you. Two suppliers process information on our behalf:
- Microsoft hosts this website and delivers and stores the enquiry emails.
- Google provides the reCAPTCHA spam check and, if you accept the relevant cookies, our analytics and advertising measurement.
We may also disclose information where the law requires it, for example to comply with a court order, and we would report an attack on this site to law enforcement and disclose the attacker’s identity to them.
Sending information outside the UK
Google and Microsoft both process information outside the UK, including in the United States. Both certify to the UK Extension to the EU-U.S. Data Privacy Framework, which is the safeguard the transfer relies on, and their data processing terms provide standard contractual clauses that take over if either stops relying on the framework. You can ask us for a copy of the relevant terms.
How long we keep your information
| What | How long |
|---|---|
| An enquiry that does not lead to work | 24 months from your last contact with us |
| An enquiry that leads to a project | 6 years from the end of that engagement, the period in which a claim connected to the work could still be brought |
| Your IP address, used only to limit repeat submissions of the enquiry form | Up to one hour, in memory. It is not written to a log we keep and is not included in the enquiry that reaches us |
| Analytics data, if you accepted analytics cookies | 14 months |
| Your cookie choice | 12 months, as set out in the cookie policy |
Where a period is a maximum, we delete earlier if we no longer need the information.
Your rights
You have the right to:
- Access the personal information we hold about you, and get a copy of it
- Rectification of anything inaccurate or incomplete
- Erasure of your information in certain circumstances
- Restriction of what we do with it in certain circumstances
- Object to our use of it where we rely on legitimate interests
- Portability, a copy in a portable format, where the processing is based on consent or a contract and is carried out automatically
- Withdraw your consent at any time, where we rely on it. Our cookie policy explains what that does about information already collected
To exercise any of these, contact us. We will not charge you, and we will normally respond within one month.
If you are unhappy with our response you can complain to the Information Commissioner’s Office: make a complaint to the ICO. If you are in the EU you can contact your own national authority instead.
Automated decision making
The automatic refusal of a suspected spam submission, described above, is the only automated decision on this site. It has no legal or similarly significant effect on you, and another route to us is always available.
Changes to this policy
We may amend this policy to reflect changes in how we handle your information. The date and version at the top of this page show when it last changed. If a change affects what you consented to, we will ask you again.
How to contact us
To exercise your rights or ask about our use of your information, contact us or write to Bang Creations Limited, 56b High Street, Haslemere, Surrey, England, GU27 2LA.