Privacy Policy

Website: wroughtbyassociation.com Effective date: 9 September 2026 Last updated: 9 September 2026

1. Who we are

This website is operated by Wrought by Association ("we", "us", "our"), based in London, United Kingdom. We are the data controller for the personal information collected through this site.

If you have any questions about this policy or how we handle your information, contact us at contact@wroughtbyassociation.com.

2. What this policy covers

This policy explains what personal information we collect when you visit wroughtbyassociation.com or send us a message through our contact form, how we use it, who we share it with, and the rights you have over it.

This site is a simple informational site. It has an "About" page and a contact form. We do not sell products, take payments, or run user accounts through this site.

3. Information we collect

3.1 Information you give us

When you use the contact form, we collect the information you enter, which may include:

  • Your name

  • Your email address

  • The subject and content of your message

  • Any other details you choose to include

You are not required to give us this information, but we cannot respond to your enquiry without a way to contact you.

3.2 Information collected automatically

Our site is hosted on Squarespace. When you visit, Squarespace's servers automatically record certain technical information, which may include:

  • Your IP address

  • Browser type and version

  • Device type and operating system

  • Pages you visit, the time of your visit, and the site that referred you

  • Cookie identifiers (see Section 5)

This information is used to run the site, keep it secure, and produce aggregated visitor statistics. It does not, on its own, identify you by name.

4. How we use your information and why we are allowed to

What we doInformation usedLegal basis (UK GDPR / EU GDPR)Respond to your contact form messageName, email, message contentLegitimate interests (replying to enquiries you have sent us), or steps taken at your request before entering into a contractKeep the site running and secure, and prevent abuseTechnical data, IP addressLegitimate interests (operating and protecting the site)Understand how the site is used (aggregated statistics)Technical data, cookiesConsent, where cookies are not strictly necessary; otherwise legitimate interestsComply with legal obligationsAny relevant informationLegal obligation

We do not use your information for automated decision-making or profiling, and we do not sell it to anyone.

5. Cookies

Squarespace sets a small number of cookies on this site.

  • Strictly necessary cookies are required for the site to function (for example, to protect the contact form against spam and cross-site request forgery). These do not require your consent.

  • Analytics cookies may be used to collect aggregated statistics about how visitors use the site. Where required by law, we only set these with your consent, which you can give or withdraw through the cookie banner.

You can also control cookies through your browser settings. Blocking some cookies may affect how the site works.

For details of the specific cookies Squarespace uses, see Squarespace's cookie policy at https://www.squarespace.com/cookie-policy.

6. Who we share your information with

We share your information only with the service providers we need in order to run the site and respond to you:

  • Squarespace, Inc. – hosts the website, stores contact form submissions, and processes technical visitor data. Squarespace's privacy policy is at https://www.squarespace.com/privacy.

  • Our email provider – receives contact form notifications and holds our reply correspondence.

These providers act on our instructions and are bound by contracts that restrict how they may use your information.

We may also disclose your information if required to do so by law, or to protect our rights, property, or safety or that of others.

7. International transfers

We are based in the United Kingdom, but our visitors come from around the world and our service providers operate internationally. In particular, Squarespace stores data on servers in the United States.

Where your information is transferred outside the UK or the European Economic Area, we rely on safeguards recognised under UK and EU law, such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or a relevant adequacy decision (including the EU-US Data Privacy Framework where the provider is certified).

8. How long we keep your information

  • Contact form messages and our replies: kept for 12 months after our last correspondence with you, unless we need to keep them longer to deal with an ongoing matter or to meet a legal requirement.

  • Technical and analytics data: retained by Squarespace in line with its own retention policies, and viewed by us only in aggregated form.

When information is no longer needed, we delete it or anonymise it.

9. Your rights

Depending on where you live, you may have some or all of the following rights over your personal information:

  • Access – ask for a copy of the information we hold about you

  • Rectification – ask us to correct inaccurate or incomplete information

  • Erasure – ask us to delete your information

  • Restriction – ask us to limit how we use your information

  • Portability – receive your information in a structured, machine-readable format

  • Objection – object to processing based on our legitimate interests

  • Withdraw consent – where we rely on consent, withdraw it at any time

  • Complain – lodge a complaint with a supervisory authority

To exercise any of these rights, email us at contact@wroughtbyassociation.com. We will respond within one month, or tell you if we need longer. We may need to verify your identity before acting on a request.

UK visitors: the supervisory authority is the Information Commissioner's Office (ICO), https://ico.org.uk. We would appreciate the chance to resolve any concern with you first.

EU/EEA visitors: you may complain to the data protection authority in your country of residence.

California residents: you have the right to know what personal information we collect and how we use and share it, to request deletion, and not to be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioural advertising.

Visitors elsewhere: if your local law gives you additional rights, we will honour them. Contact us using the details above.

10. Security

We take reasonable technical and organisational measures to protect your information, including using a hosting provider with industry-standard security controls and encrypted (HTTPS) connections to the site. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

11. Children

This site is not directed at children under 16, and we do not knowingly collect information from them. If you believe a child has sent us personal information, contact us and we will delete it.

12. Links to other websites

Our site may link to other websites that we do not control. This policy does not apply to those sites, and we are not responsible for their privacy practices.

13. Changes to this policy

We may update this policy from time to time. When we do, we will post the revised version on this page and update the "Last updated" date above. Significant changes will be highlighted on the site.

14. Contact us

Wrought by Association London, United Kingdom Email: contact@wroughtbyassociation.com