Privacy Policy.

This privacy policy explains how Reelty ("we", "us", "our") collects, uses and protects your personal information when you visit reelty.cloud or engage us for services. We're based in the United Kingdom and operate under UK GDPR and the Data Protection Act 2018.

Who we are

Reelty is an independent design studio founded by Rhys Evans, based in the UK. You can reach us at hello@reelty.cloud for any privacy-related questions. For the purposes of UK GDPR, Reelty is the data controller for personal information collected through this website and via our services.

What information we collect

We collect the minimum information we need to reply to you and run our business. Specifically:

• Information you give us directly — your name, email address, company name, website, budget, timeline and any details about your project when you contact us via the form or email.
• Information collected automatically — if you accept analytics cookies, basic information about how you use the site (pages visited, time on page, rough location at country level, device type). See our cookie policy for detail.
• Information from third parties — if you reach out via Instagram or LinkedIn, we receive whatever your profile makes publicly available. We don't retrieve anything more than that.

We do not collect special-category data (health, ethnicity, political views, etc.), and we don't ask for payment card information on this website — invoicing is handled separately through a secure third-party accounting provider.

How we use your information

We use your information only for the purposes you'd reasonably expect, namely:

• To reply to enquiries and discuss potential projects
• To deliver services we've been contracted to provide
• To send project-related updates during active engagements
• To keep basic records for accounting and legal compliance
• To understand how the site is used, so we can improve it (only with your consent)

We do not sell, rent, or trade your personal information. We don't add you to marketing lists without your explicit opt-in. We don't operate a newsletter at this time.

Legal basis for processing

We rely on the following legal bases under UK GDPR:

• Consent — for analytics cookies and any optional communications.
• Contract — to deliver services you've engaged us for and communicate about them.
• Legitimate interests — to reply to your enquiries, maintain basic business records, and protect the website from abuse. We've considered your rights and believe our processing is proportionate.
• Legal obligation — to comply with HMRC requirements and other UK law.

How long we keep it

We keep information only as long as we need to:

• Enquiries that don't become projects — deleted within 12 months.
• Active client records — retained for the duration of the engagement plus 7 years, in line with HMRC record-keeping requirements.
• Analytics data — retained for 14 months before anonymisation or deletion.

Who we share it with

We keep things lean and only share data with trusted processors where necessary to run the business:

• Email & productivity — Google Workspace (for handling correspondence).
• Site hosting — our hosting provider, for delivering this website.
• Analytics — only if you've opted in. See the cookie policy.
• Accounting — a UK-based accounting platform for invoices and tax records.

Each of these providers is bound by appropriate data-processing agreements. We don't share your data with anyone for marketing purposes.

International transfers

Some of our service providers (for example, email infrastructure) are based outside the UK, including the United States. Where data is transferred internationally, we rely on appropriate safeguards — UK International Data Transfer Agreements, EU Standard Contractual Clauses, or equivalent — to protect your information.

Your rights

Under UK GDPR, you have the right to:

• Ask for a copy of the information we hold about you
• Correct information that's inaccurate or incomplete
• Ask us to delete your information ("right to be forgotten")
• Restrict how we use your information
• Object to processing based on legitimate interests
• Ask for your information in a portable format
• Withdraw consent at any time where consent is the legal basis

To exercise any of these, email us at hello@reelty.cloud. We'll respond within 30 days. If you're not happy with our response, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Security

We take reasonable steps to protect your information — encrypted connections, strong passwords with two-factor authentication, limited access, and trusted service providers. But no system is perfectly secure, so we can't guarantee absolute security. If we ever suffer a breach that affects your data, we'll notify you and the ICO as required by law.

Children

This site isn't directed at children. We don't knowingly collect information from anyone under 16.

Changes to this policy

We may update this policy from time to time — for example, if we change providers or add a new service. The "last updated" date at the top will always reflect the latest version. For material changes, we'll post a notice on the site or email clients directly.

Questions?

Genuinely, we want this stuff to be clear. If anything in here is confusing, or you want to exercise any of your rights, email hello@reelty.cloud and we'll get back to you personally.