Privacy Policy

1. Who We Are

ctrl.alt.elite is a trading name of Ctrl Alt Elite Studio Ltd, a company registered in England and Wales under company number 17140083, registered office 33 Birch Grove, Cwmbran NP44 6EP. We operate the website ctrl-alt-elite.uk and design, build, host, and maintain websites for small businesses in the United Kingdom. For the purposes of data protection law, we are the data controller of your personal information.

Contact us at: contact@ctrl-alt-elite.uk

2. What Data We Collect

• Contact enquiries: name, email address, company name, and message submitted via our contact form.
• Client accounts: if you sign up for a plan, we collect the details needed to deliver the service - name, business details, billing information, and anything you upload or send us via the client portal.
• Newsletter: email address, if you subscribe.
• Analytics data: anonymised usage data (pages visited, referrer, approximate location) collected via our own first-party analytics, Google Analytics (GA4), Google Ads measurement, and Vercel Analytics. Our first-party analytics is cookieless and runs without consent; Google Analytics and Google Ads personalisation only activate if you have consented.

3. How We Use Your Data

• To respond to your enquiries and discuss potential projects.
• To send newsletters if you have subscribed (you can unsubscribe at any time).
• To understand how our website is used and improve the experience, using anonymised analytics.

4. Legal Basis for Processing

• Legitimate interests: responding to enquiries and improving our services.
• Consent: analytics cookies and newsletter subscription.

5. Cookies

We use cookies and local storage to remember your consent choice and, where you have accepted, to collect anonymised analytics data. For full details, see our Cookie Policy.

6. Third Parties and Sub-Processors

We use the following providers to deliver this site and our services. Where personal data is transferred outside the UK, the transfer is covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

• Supabase: database and authentication provider. Stores contact enquiries, newsletter subscribers, client accounts, and portal data. Hosted in the EU.
• Resend: email delivery. Sends contact-form notifications to us, authentication emails (login links, password resets), transactional emails to clients, and newsletter campaigns. US-based.
• Vercel: hosting, server logs, and Vercel Analytics (anonymised, cookieless). US-based with EU edge regions.
• First-party analytics: our own cookieless analytics beacon (no third party). Records pageviews, referrers and approximate device data without persistent identifiers.
• Google Analytics (GA4): usage analytics. Only loaded with your consent. Google may process data in the US.
• Google Ads: advertising measurement and remarketing. The Google Ads tag loads on all visits so conversions can be attributed, but ad personalisation and ad cookies are set to denied in the UK/EEA until you accept the consent banner.
• Stripe: payment processing for clients on a subscription. Card details are submitted directly to Stripe and are not stored on our servers.

We do not sell your personal data to any third party.

7. Data Retention

Contact enquiry data is retained for up to 2 years, or for the duration of any ongoing business relationship. Newsletter subscriber data is retained until you unsubscribe.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data where we no longer have a lawful reason to retain it.
• Object to processing based on legitimate interests.
• Withdraw consent at any time.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email contact@ctrl-alt-elite.uk.

9. Contact

For any privacy-related questions, email us at contact@ctrl-alt-elite.uk.