Privacy Policy
Last updated: 16/09/2026
1. Who we are
This website, https://annabelleandco.uk/ (the “Site”), is operated by Annabelle and Co Architects Limited (trading as “Annabelle & Co.”), a company registered in England and Wales under company number 08736894.
Registered office: The Barn, Bradford House Farm, Bradford Lane, Nether Alderley, Macclesfield, SK10 4TR
You can contact us at info@annabelleandco.uk or 01625 528925.
We are the “data controller” for the personal data described in this policy — meaning we decide how and why your data is used.
2. What personal data we collect
a) When you use our contact form
Our contact form collects your name, email address, telephone number, and message. You must actively consent to this before submitting the form. Submissions are stored in our website database and automatically deleted after 30 days. We do not capture your IP address through this form.
b) When you email or call us directly
If you contact us outside the form — by email or phone — we collect whatever information you choose to share, typically your name, contact details, and details of your enquiry.
c) Automatically, when you browse the Site
We use Google Analytics to understand how visitors use our Site. This collects information such as your IP address (anonymised where possible), device and browser type, pages visited, and how you arrived at the Site, via cookies. See Section 4 below.
d) Security monitoring
We use a security plugin (Wordfence) that may log IP addresses and browsing behaviour to detect and prevent malicious activity, such as attempted unauthorised logins.
3. How we use your data, and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to contact form enquiries | Name, email, phone, message | Consent |
| Responding to direct email/phone enquiries | Name, contact details, enquiry details | Legitimate interest / steps to enter a contract |
| Website analytics | IP address, browsing behaviour | Consent (via cookie banner) |
| Security and fraud prevention | IP address, login activity | Legitimate interest |
We will never sell your personal data.
4. Cookies and analytics
Our Site uses cookies to operate correctly and to understand how it’s used. We use Complianz to manage cookie consent in line with UK PECR and GDPR requirements. This includes:
- Essential cookies — required for the Site to function (e.g. WordPress session cookies), and set regardless of consent.
- Analytics cookies — Google Analytics, used to measure visitor numbers and behaviour. These are only set once you give consent via our cookie banner.
You can change your cookie preferences at any time using the “Cookie Settings” link in our site footer, or by adjusting your browser settings.
5. Sharing your data with third parties
We share personal data with the following third-party service providers, solely to help us run the Site and our business:
- Google (Analytics) — see Google’s Privacy Policy
- Wordfence (security monitoring) — see Wordfence’s Privacy Policy
- Complianz (cookie consent management) — see Complianz’s Privacy Statement
We do not share your data with any other third party for their own marketing purposes.
6. International transfers
Google may process analytics data outside the UK/EEA, including in the United States. Where this happens, we rely on Google’s compliance with recognised safeguards such as the UK’s International Data Transfer Agreement or an equivalent adequacy mechanism.
7. How long we keep your data
- Contact form submissions: automatically deleted after 30 days
- Direct email/phone enquiries: retained indefinitely, until no longer needed for the purpose collected or until you ask us to delete it
- Analytics data: retained per Google Analytics’ default retention settings – 14 months
- Security logs: retained per Wordfence’s default settings
- Cookie consent records: retained per Complianz’s default settings
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request deletion of your data
- Restrict or object to how we use your data
- Receive your data in a portable format
- Withdraw consent at any time — including withdrawing cookie consent via our cookie settings
To exercise any of these rights, contact us at info@annabelleandco.uk.
If you’re unhappy with how we’ve handled your data, you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO) — ico.org.uk.
9. How we keep your data secure
We use industry-standard security measures, including a web application firewall (Wordfence) and secure hosting, to protect personal data from unauthorised access, loss, or misuse.
10. Children’s privacy
Our Site is not directed at children, and we do not knowingly collect personal data from anyone under 16.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page will reflect the most recent revision.
12. Contact us
Annabelle and Co Architects Limited (trading as Annabelle & Co.)
Company number: 08736894
The Barn, Bradford House Farm, Bradford Lane, Nether Alderley, Macclesfield, SK10 4TR
info@annabelleandco.uk | 01625 528925