← Back to Vintdragon

Privacy Policy

Last updated: 17 October 2026

This Privacy Policy explains how Vintdragon collects, uses, stores and protects your personal information when you visit our website, contact us, book a call, make a payment or use our services.

We aim to collect only the information necessary to operate our business and provide our services, and to handle it in accordance with applicable UK data protection laws.

Who We Are

Vintdragon is a web design and digital services business operated by a sole trader.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the sole trader operating Vintdragon is responsible for determining how and why personal information is processed, except where another organisation independently determines its own processing purposes.

This policy applies to personal information collected through our website, enquiries, booking processes, payment processes and direct business communications.

1. Information We Collect

The information we collect depends on how you interact with Vintdragon.

Information You Provide

When you contact us, request a quote, book a consultation or enquire about our services, we may collect:

  • Your name.
  • Your email address.
  • Your telephone number, if provided.
  • Your business name and website, where applicable.
  • Details about your project, requirements and budget, where provided.
  • Information contained in your messages and communications.
  • Information you provide when completing forms or booking consultations.

If you become a client, we may also collect information necessary to manage your project, deliver our services, communicate with you, issue invoices, process payments and maintain business records.

Please do not submit sensitive personal information through our website unless it is specifically requested and there is an appropriate reason and lawful basis for collecting it.

Payment Information

Payments for Vintdragon services may be processed through Stripe.

When you make a payment, Stripe may collect and process payment details, billing information, transaction records and other information necessary to process the transaction, prevent fraud and meet legal obligations.

We do not intentionally store full payment card details on the Vintdragon website. Stripe's handling of your information is also subject to its own terms and privacy policy.

Stripe Privacy Policy: https://stripe.com/privacy

Information Collected Automatically

Depending on our website configuration and the technologies we use, we may collect technical information such as:

  • IP address.
  • Browser type and version.
  • Device and operating system information.
  • Pages visited and interactions with our website.
  • Referring website.
  • Approximate geographical information.
  • Cookie identifiers and similar technical information, where applicable.

Website analytics and tracking configuration: [Confirm whether analytics, advertising pixels or other non-essential tracking technologies are used, which providers operate them, and what information they collect.]

We will update this policy as necessary to accurately reflect our actual website configuration.

2. How We Use Your Information

We may use your personal information to:

  • Respond to enquiries and requests for quotes.
  • Arrange and manage consultations and bookings.
  • Understand your project requirements and prepare proposals.
  • Provide website design, development and other agreed services.
  • Communicate with you about projects, revisions, deadlines and support.
  • Process payments and manage invoices.
  • Maintain appropriate business and accounting records.
  • Protect our website and business against fraud, abuse and unauthorised access.
  • Improve our website and services where appropriate.
  • Comply with applicable legal obligations.

We do not sell your personal information.

We will not use your information for unrelated purposes that are incompatible with the reasons it was collected without an appropriate legal basis.

3. Our Legal Basis for Processing

Where UK GDPR applies, we process personal information under one or more of the following legal bases, depending on the circumstances.

Contract: Where processing is necessary to enter into or perform a contract with you, including providing services and managing payments.

Legitimate interests: Where processing is necessary for legitimate business interests, such as responding to relevant enquiries, maintaining business relationships, securing our website and improving our services, provided those interests do not override your rights.

Legal obligation: Where processing is necessary to comply with applicable legal requirements, including tax and accounting obligations.

Consent: Where you have given valid consent, such as where consent is required for non-essential cookies or certain forms of electronic marketing.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place lawfully before consent was withdrawn.

4. Third-Party Service Providers

We may use third-party providers to operate our website, communicate with clients and deliver our services.

These may include:

  • Contact form providers: To receive enquiries and transmit submitted information.
  • Booking and scheduling providers: To arrange consultations, manage appointments and send booking confirmations.
  • Stripe: To process payments and related transactions.
  • Website hosting providers: To host, secure and deliver our website.
  • Analytics providers: To measure website usage, if analytics tools are enabled.
  • Website development and software providers: To support the creation, operation and maintenance of websites.

The names of our contact form, booking, hosting and analytics providers have not yet been confirmed for this policy.

Third-party providers may process personal information on our behalf or independently for their own purposes. Their privacy policies and contractual arrangements determine how they handle information within their respective services.

5. Cookies and Similar Technologies

Our website may use cookies or similar technologies to support essential functionality, remember preferences, understand website usage or provide other features.

The exact cookies and tracking technologies used on the Vintdragon website are currently subject to confirmation.

Before publication, we will verify our website configuration and identify the relevant cookies and providers.

Where required by law, we will obtain consent before placing non-essential cookies or using similar technologies. Strictly necessary technologies may be used where legally permitted without consent.

You may also manage or delete cookies through your browser settings. Blocking certain cookies may affect some website functionality.

We will not claim that analytics or tracking is disabled unless our actual website configuration supports that statement.

6. How We Share Personal Information

We may share personal information where reasonably necessary with:

  • Service providers supporting our website and business operations.
  • Stripe and other relevant payment or financial service providers.
  • Professional advisers, including accountants and legal advisers.
  • Public authorities or other parties where disclosure is required by law.
  • A successor or purchaser in connection with a genuine business transfer, where lawful.

We limit information shared with service providers to what is reasonably necessary for the relevant purpose, where applicable.

We do not sell personal information to third parties.

7. International Data Transfers

Some service providers may process personal information outside the United Kingdom and Wales.

Where personal information is transferred internationally and applicable law requires safeguards, we will take appropriate steps. These may include relying on UK adequacy regulations, an applicable international data transfer agreement or another lawful transfer mechanism.

Further details may be available in the privacy policies and documentation of the relevant providers.

8. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, contractual and security requirements.

For example:

  • Enquiry information may be retained while we respond to you and for a reasonable period afterwards.
  • Client and project records may be retained during the relationship and afterwards where necessary for contractual, legal or business purposes.
  • Payment and accounting records may be retained for the periods required by applicable law.
  • Booking information may be retained for the period necessary to manage appointments and related business records.
  • Analytics information, if collected, may be retained according to the relevant provider's settings.

Retention periods depend on the type of information and the circumstances.

Where information is no longer required, we will take reasonable steps to delete it or anonymise it, subject to any applicable legal obligations.

9. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure and misuse.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

Where a personal data breach occurs, we will assess and respond to it in accordance with applicable legal requirements.

10. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request erasure of your personal information.
  • Request restriction of certain processing.
  • Object to processing based on legitimate interests.
  • Request certain information in a portable format.
  • Withdraw consent where processing is based on consent.
  • Complain to the Information Commissioner's Office (ICO).

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, contact hello@vintdragon.com. We may need to verify your identity before responding.

You can find more information about your rights and how to complain at https://ico.org.uk/.

11. Children's Privacy

Our website and services are not specifically directed at children. We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can assess the matter and take appropriate action.

12. External Websites

Our website may contain links to third-party websites, platforms or services.

We do not control their content or privacy practices. When you visit another website or use an external service, its own privacy policy and terms may apply.

We recommend reviewing the relevant policies before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business, website, service providers, data processing practices or legal obligations.

The latest version will be published on our website with an updated date.

Where required by law, we will take additional steps to inform affected individuals or obtain consent.

14. Contact Us

For questions about this Privacy Policy or how we handle personal information, contact:

Vintdragon

Trading name of: Thomas William Lewis

Email: hello@vintdragon.com

Website: https://vintdragon.com