Privacy Policy

Your privacy matters. This policy explains what personal information I collect through Sam Anthony Design, why I use it, how long I keep it and the choices you have.

Sam Anthony Design is operated by Sam Anthony, a sole trader based in the United Kingdom. For data-protection purposes, Sam Anthony is the controller of the personal information described in this policy.

This policy applies when you:

• visit samanthony.design;

• contact me about a project, service or partnership;

• join my newsletter or download a resource;

• purchase a product or service;

• leave a review;

• become a client, customer, collaborator or supplier; or

• otherwise interact with Sam Anthony Design.

If you have a privacy question or want to exercise one of your rights, email sam@samanthony.design.

The information I collect

The information I collect depends on how you interact with me.

Enquiries, forms and partnerships

When you complete a contact, media-kit, partnership or other enquiry form, I may collect:

• your name, role and email address;

• your business name and website;

• the service you are interested in;

• project information and your preferred timing;

• product or campaign details;

• partnership details; and

• anything else you choose to include in your message.

Form submissions are delivered to my business email so that I can review and respond to them.

Newsletter sign-ups and downloads

When you join my newsletter or request a template, download or other resource, I may collect your name, email address and information about the form or resource you used.

My mailing list is managed through Kit. Where submitting a download form also joins you to my mailing list, this will be explained when your information is collected. Every marketing email I send through Kit includes an unsubscribe link.

Purchases and payments

When you buy a product or service, I may receive your name, email address, billing information, purchase details and transaction status.

Payments are processed by Stripe. Stripe handles your payment-card information under its own privacy practices. I do not receive or store your full card number.

Client and project information

If you enquire about or commission my services, I may collect and use:

• your contact and company details;

• contracts, proposals and project briefs;

• correspondence, feedback and approvals;

• billing details, invoices and payment records;

• brand assets, photographs, copy and website content;

• meeting recordings, transcripts and notes;

• website, platform or account access details needed for the work; and

• other information reasonably required to deliver and support the project.

Please only provide personal information that is relevant to the project and that you are permitted to share. If you give me information about another person, you are responsible for making sure you have an appropriate reason to do so.

Reviews, testimonials and case studies

When you leave a review, I may collect your name, role, business information, review and any photograph or brand assets you provide.

With permission, I may publish reviews, testimonials, client names, photographs, logos, project results and case studies on my website, portfolio, social media, YouTube channel or teaching materials. Where client communications or other personal material are featured, I will request and receive approval first.

Website analytics

I use Framer Analytics to understand broad patterns such as visits, popular pages and how people find the website.

Framer Analytics does not use cookies or generate persistent identifiers. I use this information in an aggregated form to understand and improve the website, its content and its performance.

Information received from elsewhere

I may receive limited professional or contact information through a referral, an introduction, a freelance marketplace, a social platform or another public business source. I will only use it where I have a lawful and reasonable purpose, such as responding to an introduction or discussing a relevant business opportunity.

Information I do not intentionally collect

I do not intentionally request special-category information, such as details about health, ethnicity, religion, political opinions or sexual orientation. Please do not provide this information unless it is genuinely necessary and we have agreed how it will be handled.

Why I use your information

UK data-protection law requires me to have a valid reason, known as a lawful basis, whenever I use personal information.

• Responding to enquiries and discussing a potential project - Taking steps at your request before entering a contract and my legitimate interests in responding to business enquiries.

• Preparing proposals, quotes and contracts - Taking steps before entering a contract and performing a contract.

• Delivering services, products, downloads and project support - Performing a contract or taking steps you have requested.

• Managing client relationships, correspondence, feedback and approvals - Performing a contract and my legitimate interests in managing my business and projects effectively.

• Processing payments, invoices, refunds and transaction records - Performing a contract and complying with legal obligations.

• Sending newsletters, resources, offers and other email marketing - Your consent.

• Publishing a review, testimonial, photograph or approved case study - Your consent and, where appropriate, my legitimate interests in showing genuine examples of my work.

• Analysing and improving my website, content and services - My legitimate interests in operating and improving Sam Anthony Design.

• Protecting my accounts, website, clients and business from misuse or security threats - My legitimate interests and, where applicable, legal obligations.

• Keeping tax, accounting and legal records - Complying with legal obligations and my legitimate interests in establishing or defending legal claims.

• Managing affiliate referrals - My legitimate interests in measuring referrals and earning commission from recommendations.

Where I rely on legitimate interests, I consider whether the use is necessary, proportionate and within what you would reasonably expect. I do not rely on legitimate interests where your rights and interests outweigh mine.Where I rely on legitimate interests, I consider whether the use is necessary, proportionate and within what you would reasonably expect. I do not rely on legitimate interests where your rights and interests outweigh mine.

When providing information is necessary

You can choose whether to make an enquiry, join the newsletter, download a resource or leave a review. However, I need certain information to respond, deliver a requested resource or provide a service.

Some details are also necessary to enter into or perform a contract, process a payment, provide project access, issue an invoice or meet a legal requirement. If the relevant information is not provided, I may be unable to accept an order, begin or complete a project, provide support or fulfil the request.

Where I rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything lawfully done before you withdrew it.Where I rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything lawfully done before you withdrew it.

Email marketing

I use Kit to manage newsletter subscriptions, deliver requested resources and send emails about design, websites, content, products, services and related opportunities.

You can unsubscribe at any time by using the link included in every marketing email or by emailing sam@samanthony.design. Unsubscribing will not stop essential messages about a purchase, active project or service you have requested.

I may retain limited information on a suppression list after you unsubscribe. This helps me respect your choice and avoid adding you back to marketing unintentionally.

You have an absolute right to object to the use of your personal information for direct marketing.

Affiliate links

Some pages, articles or resources may contain affiliate links. If you follow one of these links and later make a purchase, I may receive a commission at no additional cost to you.

An affiliate link may contain a referral identifier. The destination website or affiliate provider may process information about the click or purchase under its own privacy policy. I may receive referral or conversion information, but I do not sell your contact details to affiliate partners.

Who I share information with

I only share personal information where it is reasonably necessary to operate my business, deliver what you have requested or meet a legal obligation.

Depending on the interaction, this may include:

• Framer, for website hosting, forms and privacy-focused website analytics;

• Kit, for newsletter subscriptions, email delivery and requested downloads;

• Stripe, for payments, transaction management and fraud prevention;

• Google services, including Google Drive and Google Meet, for project files, communication and collaboration;

• Figma and Framer, for design and website work;

• Notion and Atelier Tasks, for project and task management;

• Loom, for video communication, recordings and project walkthroughs;

• email, cloud-storage and security providers;

• professional advisers such as an accountant, solicitor or insurer where needed;

• carefully selected contractors or service providers where their involvement is necessary and subject to appropriate confidentiality and data-protection obligations; and

• regulators, law-enforcement bodies, courts or other parties where disclosure is required by law or necessary to protect legal rights.

If Sam Anthony Design is reorganised, sold or transferred, relevant information may be disclosed to professional advisers and a genuine prospective purchaser, subject to appropriate safeguards.

I do not sell or rent your personal information.

International transfers

Sam Anthony Design is based in the United Kingdom, but several of the services I use operate internationally. This means personal information may sometimes be processed outside the UK.

Where a restricted international transfer takes place, I take reasonable steps to use providers that apply appropriate safeguards. Depending on the destination and provider, these may include UK adequacy regulations, approved contractual protections or another lawful transfer mechanism.

You can contact me if you would like more information about the safeguards relevant to your information.

How long I keep information

I keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including legal, tax, accounting and dispute-resolution requirements.

My usual retention periods are:

• Enquiries that do not become projects - Up to two years after our last meaningful contact.

• Client correspondence, contracts and project files - Usually up to six years after the project or client relationship ends.

• Invoices, payments and tax records - At least five years after the relevant Self Assessment submission deadline, or longer where legally required.

• Website or account access details - Until they are no longer required for the project, handover or agreed support.

• Meeting recordings and transcripts - Usually up to two years, unless they remain necessary for an active project, support or a legal matter.

• Newsletter subscriber information - Until you unsubscribe or I close the mailing list, followed by a limited suppression record where needed.

• Reviews, testimonials and approved case studies - While they remain relevant and published, or until the material is removed or permission is withdrawn where applicable.

• Aggregated website analytics - According to the retention settings and practices used by Framer Analytics.

Some information may be removed sooner when it is no longer needed. It may be kept longer if there is an active dispute, legal claim, regulatory requirement or another justified reason. Residual copies may remain in secure back-ups until they are overwritten through the normal back-up cycle.

How I protect information

I use reasonable technical and organisational measures designed to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

These measures include limiting access to information, using reputable service providers, securing accounts and devices, and only retaining information that remains necessary. No method of electronic transmission or storage can be guaranteed to be completely secure, but I take proportionate steps to reduce the risks.

If you provide access credentials for a project, they will only be used for the agreed work and support. Wherever possible, please use secure sharing, limited permissions and temporary or project-specific access rather than sending reusable passwords.

Your rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

• ask for confirmation that I hold your personal information;

• request a copy of your personal information;

• ask me to correct inaccurate or incomplete information;

• ask me to delete your information;

• ask me to restrict how your information is used;

• object to processing based on legitimate interests;

• object at any time to direct marketing;

• receive certain information in a portable format;

• withdraw consent at any time; and

• complain about how your information has been handled.

These rights are not absolute, and an exemption may apply in some circumstances. If I cannot fulfil a request, I will explain why.

To exercise a right, email sam@samanthony.design. I may need to ask for information to confirm your identity and locate the relevant records. I will respond without undue delay and normally within one month.

I do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

Data-protection complaints

If you are concerned about how I have used your personal information, please email sam@samanthony.design and make clear that you are raising a data-protection complaint.

Please include enough information for me to understand the issue and locate any relevant records. I will:

• acknowledge your complaint within 30 days;

• take appropriate steps to investigate it;

• keep you informed where the investigation takes time; and

• explain the outcome without unnecessary delay.

If you are based outside the UK, you may also have the right to contact the data-protection authority in your country.

Children’s privacy

My website and services are not aimed at children under 18, and I do not knowingly collect personal information from them.

If you believe that a child has provided personal information to me, please contact sam@samanthony.design so that I can review and, where appropriate, delete it.

External websites

My website may link to websites, platforms and services operated by other organisations. I am not responsible for their privacy practices. Please review the relevant privacy information before providing personal information to an external service.

Changes to this policy

I may update this policy when my services, technology or legal obligations change. The latest version will always be published on this page, with the revision date shown at the top.

If a change materially affects how I use information already collected, I will take reasonable steps to provide additional notice where required.

Contact

Sam Anthony

Sam Anthony Design

Email: sam@samanthony.design

Website: samanthony.design