Privacy policy
Last updated: 24 December 2025
This Privacy Policy explains how By Design (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you use https://bydesignministry.co.uk/ (the “Site”) or contact us.
We comply with UK data protection laws, including the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where relevant.
Who we are (Data Controller)
By Design is the organisation responsible for your personal data collected via this Site (the “data controller”).
Contact email: shaf@bydesignministry.co.uk
Website: https://bydesignministry.co.uk/
What personal data we collect
Depending on how you use the Site, we may collect:
A) Information you give us
Contact details (such as your name and email address) when you submit a form, request information, or contact us.
Messages and any information you include when you email us.
Subscription preferences if you join a mailing list (where offered).
Donation or payment-related details (where offered). Payments are typically handled by third-party payment providers, so we may not receive your full card details.
B) Information collected automatically
Device and usage data: IP address, browser type, device information, pages viewed, clicks, time on page, referral source.
Cookie and tracking data (see Section 8 and our Cookie Policy).
C) Information from third parties
If you interact with embedded content (e.g., YouTube) or our advertising (e.g., Meta or Google), those third parties may provide us with aggregated reporting or conversion signals, depending on your settings and consent.
How we use your personal data
We use personal data to:
Respond to enquiries and provide requested information.
Send updates or communications you request (for example, newsletters, resources, event information), where offered.
Operate, secure, and maintain the Site.
Improve the Site and understand how it is used (analytics).
Run and measure marketing or outreach campaigns (only where you have consented to marketing cookies or where lawful).
Keep records of communication and manage our relationship with you.
Comply with legal obligations and protect our rights (e.g., preventing fraud or misuse).
Our lawful bases for processing (UK GDPR)
We rely on one or more of the following lawful bases:
Consent: where you choose to opt in (e.g., email marketing where offered, and optional cookies/marketing tags).
Contract: where you ask us to provide something you request and we need data to do so (e.g., responding to a specific request).
Legitimate interests: to operate and improve the Site, keep it secure, understand usage, and communicate with people who contact us (balanced against your rights).
Legal obligation: where we must comply with the law.
You can withdraw consent at any time (see Section 9).
Who we share personal data with
We may share personal data with trusted service providers that help us run the Site and deliver services, such as:
Website hosting and site tools (including form handling and analytics features).
Analytics providers (e.g., Google Analytics 4) if you consent.
Advertising/measurement providers (e.g., Meta Pixel, Google Ads) if you consent.
Embedded media providers (e.g., YouTube) if you choose to play embedded content.
Payment processors (e.g., Stripe or similar) if you make a donation or payment (where offered).
We only share what is necessary, and we require service providers to protect personal data.
We may also share data:
If required by law or regulators.
To protect our rights, users, and the integrity of the Site (e.g., to prevent fraud or abuse).
In connection with a reorganisation or transfer of the organisation (rare), with appropriate safeguards.
International transfers
Some of our service providers may store or process data outside the UK. Where this happens, we take steps required by UK data protection law to protect your data, such as using appropriate safeguards (for example, UK-approved contractual protections).
How long we keep your data (retention)
We keep personal data only as long as necessary for the purposes in this policy, including:
Enquiries: typically kept for as long as needed to handle the request and for a reasonable period afterwards for record-keeping.
Mailing list subscriptions (where offered): kept until you unsubscribe or we no longer run the list.
Analytics/marketing data: retained according to the settings of the relevant provider and our internal review practices.
Cookies and similar technologies
We use cookies and similar technologies to operate the Site, measure usage, and (if you consent) run marketing and enable embedded content.
Please read our Cookie Policy for full details, including how to manage preferences. (Add link to your Cookie Policy page.)
Your rights (UK GDPR)
You have rights under UK data protection law, including:
Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: ask us to delete your personal data in certain situations.
Restriction: ask us to limit how we use your data in certain situations.
Objection: object to processing based on legitimate interests, and object to direct marketing.
Data portability: receive certain data in a structured, commonly used format.
Withdraw consent: where processing is based on consent (this won’t affect processing already carried out).
To exercise your rights, email: shaf@bydesignministry.co.uk
Marketing emails (if we send them): you can unsubscribe at any time using the link in the email (where provided) or by contacting us.
Complaints
If you’re unhappy with how we handle your data, please contact us first so we can try to resolve it.
You also have the right to complain to the UK Information Commissioner’s Office (ICO):
ICO website: ico.org.uk
Security
We take reasonable technical and organisational steps to protect personal data. However, no website or transmission is completely secure. Please take care when sending sensitive information by email.
Children’s privacy
Our Site is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will take appropriate steps.
Third-party links and embedded content
The Site may include links to third-party websites or embedded services (such as YouTube). We do not control these third parties, and their privacy practices are governed by their own policies. Please review their policies before providing information or using embedded features.
Changes to this Privacy Policy
We may update this policy from time to time. We will update the “Last updated” date above, and any changes will apply when posted on this page.
Contact
If you have questions about this Privacy Policy or how we use your data:
Email: shaf@bydesignministry.co.uk
Organisation: By Design
Website: https://bydesignministry.co.uk/