Privacy Policy

1. Who is responsible for your information?

Iris & Oak is responsible for the personal information collected through this website and through direct enquiries relating to its services.

If you have a question about this Privacy Policy or how your information is handled, you can contact Iris & Oak at contact@irisoak.dev.

2. Information I may collect

When you submit an enquiry through the contact form on this website, I collect the information you choose to provide:

• Your name
• Your email address
• Your business name, if you include it
• The details you share about your business, website or project

If you reach the contact form from the Portfolio Partnership Programme page, your enquiry is also marked as a Portfolio Partnership enquiry so that it can be reviewed as an application for the programme.

If you email Iris & Oak directly, I will receive the information you include in your email.

If you become a client, I may also collect information reasonably required to manage the project, communicate with you, prepare estimates or invoices and receive payment.

3. How your information is used

I may use your personal information to:

• Review and respond to your enquiry
• Send you an automatic email confirming your enquiry was received
• Consider whether your business is a good fit for the Portfolio Partnership Programme, if you apply for it
• Discuss your project or requirements with you
• Prepare estimates, proposals or invoices
• Provide services that you have requested
• Communicate with you about an active project
• Maintain appropriate business and financial records
• Meet applicable legal, accounting or tax obligations
• Protect the website and business from misuse or security issues

Enquiries submitted through the website are sent by email to Iris & Oak. The website itself does not save enquiry details to a database.

If you take part in the Portfolio Partnership Programme, the completed website may be featured as a portfolio case study. You will approve the final case-study content before it is published.

Information submitted through an enquiry will not be added to a marketing mailing list simply because you contacted Iris & Oak.

4. Lawful basis for using your information

Iris & Oak only uses personal information where there is an appropriate lawful basis for doing so.

Depending on the circumstances, this may include processing that is necessary to take steps at your request before entering into a contract, processing required to perform a contract with you, compliance with legal obligations, or legitimate interests in operating and protecting the business.

5. Services that may process your information

Iris & Oak uses third-party services to operate the website and provide business services. Where relevant, these providers may process limited personal information on behalf of Iris & Oak or as part of providing their own services.

Other service providers may be introduced where reasonably necessary to operate Iris & Oak. This Privacy Policy will be updated where appropriate if the way personal information is handled materially changes.

6. International processing

Vercel and Resend both state that their primary data processing takes place in the United States, and Google Workspace data may be processed in other countries. Information processed by these providers, including enquiry emails, is therefore likely to be processed outside the United Kingdom.

Vercel’s data processing terms apply to the Pro plan used for this website. They include the EU Standard Contractual Clauses and, for transfers from the United Kingdom, the UK International Data Transfer Addendum.

Resend’s data processing terms apply to every Resend account, including the Free plan used by Iris & Oak. Resend states that transfers from the United Kingdom are covered by the UK Addendum to the EU Standard Contractual Clauses.

Google states that Google Workspace data may be processed in any country where Google or its subprocessors maintain facilities. Google’s published data processing terms state that transfers of UK personal data to the United States rely on Google’s certification to the UK Extension to the EU-U.S. Data Privacy Framework, with Standard Contractual Clauses provided for where no such alternative transfer solution applies.

Where personal information is transferred internationally by other providers, appropriate safeguards will be used where required by applicable data protection law.

7. How long information is kept

Enquiry emails for general enquiries that do not become client projects will be deleted from the Iris & Oak Google Workspace mailbox no later than 9 months after the last meaningful communication, unless there is a legitimate reason to retain the information for longer.

Separately, copies of enquiry and confirmation emails held by Resend are kept for 30 days, as described in section 5.

If you become a client, some information may need to be retained for longer where necessary for project records, contracts, accounting, tax, dispute resolution or other legal obligations.

Information that is no longer reasonably required will be deleted or otherwise securely disposed of where appropriate.

8. Cookies, analytics and tracking

Iris & Oak uses Vercel Web Analytics to understand how visitors use this website and to help improve its content, performance and user experience.

Vercel states that Web Analytics does not use third-party cookies. It provides Iris & Oak with aggregated statistics such as page views, referring websites, approximate geographic location, browser, operating system and device type.

Instead of a cookie, Vercel identifies visits using a hash created from the incoming request. Vercel states that visitor sessions are automatically discarded after 24 hours, and that Web Analytics does not collect identifiers that track visitors across different websites.

Analytics information is used only to understand website usage and improve the Iris & Oak website. It is not used for behavioural advertising or cross-site advertising tracking.

You can object to the use of Vercel Web Analytics on this website using the analytics opt-out control provided below.

If you use this control, your choice is saved in your browser’s local storage on this device so that the website can remember it. The preference is not sent to Iris & Oak, and clearing your browser’s site data will reset it.

9. Your data protection rights

Depending on the circumstances and the lawful basis being relied upon, UK data protection law may give you rights relating to your personal information.

These may include the right to:

• Ask for access to personal information held about you
• Ask for inaccurate information to be corrected
• Ask for your information to be deleted in certain circumstances
• Ask for the use of your information to be restricted
• Object to certain uses of your information
• Request data portability where the right applies

Not every right applies in every situation. If you would like to make a request or ask a question about your information, contact contact@irisoak.dev.

11. Complaints

If you have concerns about how Iris & Oak has handled your personal information, please contact me first so that I can investigate the issue.

You also have the right to raise a concern with the UK Information Commissioner’s Office (ICO).

You can find information about making a data protection complaint through the Information Commissioner’s Office.

12. Changes to this policy

This Privacy Policy may be updated as Iris & Oak develops, new services are introduced or the way personal information is handled changes.

The latest version will be published on this page together with its most recent update date.