Who is responsible
Ritual Damage is an independent, UK-based web and design consultancy and is the data controller for the information described in this notice.
Questions about privacy or requests concerning your information can be sent to hello@ritualdamage.com.
Information received
Depending on how you contact or work with Ritual Damage, this may include:
- Your name, email address, telephone number, role and business details.
- The contents of an enquiry, attachments and information about a proposed project.
- Project correspondence, approvals, contracts, billing details and payment records.
- Technical request data received by website infrastructure, such as an IP address, browser type, requested page and timestamp.
Please do not send sensitive or special category information unless it is genuinely necessary and has been agreed in advance.
The quote form inside the AJS Autocraft project preview is a visual prototype. It is not connected, and information entered into it is not submitted to or retained by Ritual Damage.
How information is used
Enquiries and proposals
Information is used to respond, discuss a brief, prepare a proposal and take steps you request before entering into a contract. The lawful basis is contract, including pre-contract steps, and legitimate interests in managing genuine business enquiries.
Project delivery and administration
Information is used to deliver agreed work, communicate, invoice, maintain records and manage the client relationship. The lawful bases are contract, legal obligation and legitimate interests in running and protecting the business.
Website delivery and security
Limited technical data may be processed to deliver pages, prevent abuse, investigate faults and keep the website secure. The lawful basis is the legitimate interest in operating a secure and reliable website.
Ritual Damage does not sell personal information, operate a mailing list or use personal information for automated decision-making or profiling.
Who receives information
Information is only shared where needed with service providers supporting the website and the business, including:
- Cloudflare, which hosts and delivers the website and provides network security.
- The email and communications provider used to receive and store correspondence.
- Google, when the browser requests the font files used by the website.
- Professional advisers, payment providers or public authorities where reasonably necessary or legally required.
Some providers may process information outside the UK. Where an international transfer is restricted, the transfer must be covered by UK adequacy regulations or appropriate contractual safeguards. You can ask for more information about the relevant safeguards.
How long information is kept
- Enquiries that do not become projects are normally retained for up to 12 months after the last contact.
- Client, project, contract and financial records may be retained for up to seven years after the relationship ends where needed for tax, accounting, legal claims or professional records.
- Technical logs accessible to Ritual Damage are kept only for as long as needed for security and troubleshooting. Infrastructure providers apply their own security and retention schedules.
Information may be deleted or anonymised sooner when it is no longer needed, and may be kept longer where a legal obligation or active dispute requires it.
Cookies and website technology
Ritual Damage does not currently use analytics, advertising or tracking cookies. The site code does not write tracking identifiers to local storage or similar browser storage.
Cloudflare may use strictly necessary technology to deliver and protect the website. Google Fonts is loaded from Google, which means the browser sends ordinary technical request data, including the IP address, to Google when requesting a font file.
If non-essential analytics, advertising or storage technologies are introduced, this notice will be updated and an appropriate consent or objection mechanism will be provided before they are used.
Your rights
Depending on the circumstances, UK data protection law may give you the right to:
- Ask for access to the personal information held about you.
- Ask for inaccurate or incomplete information to be corrected.
- Ask for information to be erased or its use restricted.
- Receive certain information in a portable format.
- Withdraw consent where consent is the lawful basis.
You have the right to object to processing based on legitimate interests. Email hello@ritualdamage.com to exercise a right. Rights are not absolute, and identity may need to be verified before a request is completed.
Questions and complaints
Please contact Ritual Damage first so there is an opportunity to resolve the issue.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority. Visit the ICO complaint page or call 0303 123 1113.
This notice will be reviewed when the website, suppliers or use of personal information changes. Material changes will be published on this page with a new update date.