Privacy Policy - AG2 Design

AG2 Design ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services.

1. Who We Are

AG2 Design is a web design, application development, and instructional design business based in Harrogate, United Kingdom. Our registered address is Osborne House, 20 Victoria Avenue, Harrogate, HG1 5QY.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, AG2 Design is the data controller.

2. Information We Collect

We may collect the following types of personal information:

Information you provide directly

Name, email address, and message content when you submit our contact form
Project details and requirements when you engage our services
Payment information when you pay for our services

Information collected automatically

IP address and browser type
Pages visited, time spent on pages, and navigation paths
Device type and operating system
Referring website address

Automatic data collection is carried out through Google Analytics and is only activated if you consent to analytics cookies. For more details, please see our Cookie Policy.

3. How We Use Your Information

We use the personal information we collect to:

Respond to enquiries submitted through our contact form
Provide, deliver, and manage our services
Send project updates and invoices
Analyse website usage to improve our site and services (with your consent)
Comply with legal obligations

4. Lawful Basis for Processing

We process your personal data on the following legal bases:

Consent — For analytics cookies and any marketing communications
Contractual necessity — To fulfil our obligations when you engage our services
Legitimate interests — To respond to enquiries and improve our website, where this does not override your rights
Legal obligation — To comply with applicable laws and regulations

5. How We Store and Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

SSL/TLS encryption across our website
Secure hosting through Netlify with regular security updates
Limited access to personal data on a need-to-know basis

Contact form submissions are processed and stored securely through Netlify Forms.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contact form submissions — Retained for up to 12 months unless a business relationship is established
Client project data — Retained for the duration of the project and for up to 6 years afterwards for accounting and legal purposes
Analytics data — Retained in accordance with Google Analytics' data retention settings

7. Third-Party Services

We use the following third-party services that may process your data:

Netlify — Website hosting and form processing (Netlify Privacy Policy)
Google Analytics — Website analytics, only with your consent (Google Privacy Policy)

We do not sell, trade, or otherwise transfer your personal information to any other third parties.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access — Request a copy of the personal data we hold about you
Right to rectification — Request correction of inaccurate or incomplete data
Right to erasure — Request deletion of your personal data where there is no compelling reason for its continued processing
Right to restrict processing — Request that we limit how we use your data
Right to data portability — Request a copy of your data in a structured, machine-readable format
Right to object — Object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us via our contact form. We will respond to your request within one month.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch via our contact form.

Last updated: 24 February 2026