1. Who is the data controller

CherryOnTop Studio is operated by Yvette [Surname], sole trader based in Kent, United Kingdom.

For all data protection matters, you can contact:

Email: yvette@cherryontop.io

2. What personal data I collect

2.1 Data you provide directly

Through contact forms or direct communication, I may collect:

• Name
• Email address
• Message content
• Any additional information you choose to share

2.2 Automatically collected data

When you browse my websites, standard technical data may be collected:

• IP address
• Browser type and version
• Device type
• Pages visited
• Time spent on pages
• Referrer information

If analytics tools are enabled (e.g., Google Analytics), anonymised usage data may also be collected. If no analytics are used, only basic server logs apply.

2.3 Cookies

My websites may use essential cookies for functionality. If analytics or embedded media require non‑essential cookies, you will see a cookie banner and can choose whether to accept them.

3. How I use your data

I process your personal data only for legitimate business purposes:

• To respond to your enquiry
• To provide services you request
• To maintain and improve my websites
• To protect my websites from spam and abuse (e.g., reCAPTCHA, security logs)
• To comply with legal obligations

I do not use your data for marketing without your explicit consent.

4. Legal basis for processing

Under UK GDPR, I rely on the following lawful bases:

• Legitimate interest — responding to enquiries, maintaining site security
• Consent — when you choose to accept non‑essential cookies
• Contract — when you engage my services
• Legal obligation — when record‑keeping is required by law

5. How your data is stored

Your enquiry messages are stored securely in my email inbox (Hostinger email service). Technical logs are stored on my hosting server.

I do not store your data in any external CRM, marketing platform, or third‑party database unless explicitly stated.

6. How long I keep your data

I retain enquiry emails for up to 24 months, unless:

• you request deletion sooner; or
• we enter a working relationship (in which case records may be kept longer for accounting/legal reasons).

Technical logs are retained for security and maintenance purposes for a shorter period (typically 30–90 days).

7. Who I share your data with

I do not sell, trade, or share your personal data with third parties.

Your data may be processed by:

• My hosting provider (Hostinger)
• Email service provider (Hostinger email)
• Security tools (e.g., reCAPTCHA)

These providers act as data processors and are expected to comply with GDPR requirements.

I do not share your data with advertisers, SEO agencies, or external marketing companies.

8. International transfers

Some technical services (e.g., reCAPTCHA, analytics) may process data outside the UK/EU. These services use GDPR‑compliant safeguards such as Standard Contractual Clauses.

9. Your rights under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing based on legitimate interest
• Withdraw consent for cookies
• Request data portability (where applicable)

To exercise any of these rights, contact me at:

Email: yvette@cherryontop.io

10. Security

I use industry‑standard security measures to protect your data, including:

• SSL encryption
• Secure hosting
• Spam protection (honeypot, reCAPTCHA v3)
• Rate limiting
• Sanitisation of form inputs

No method of transmission is 100% secure, but I take reasonable steps to safeguard your information.

11. Children’s privacy

My websites and services are not intended for children under 16. I do not knowingly collect data from minors.

12. Links to external sites

My websites may contain links to external websites. I am not responsible for the privacy practices of those sites.

13. Changes to this policy

I may update this Privacy Policy from time to time. The latest version will always be available on my websites.

14. Contact

If you have questions about this Privacy Policy or how your data is handled, you can contact:

Email: yvette@cherryontop.io
Location: Kent, United Kingdom