Privacy Policy

Last updated: 7 September 2026

This policy explains what personal information I collect when you visit thisisash.com, get in touch, or work with me, why I collect it, and what rights you have over it.

Who I am

thisisash.com is operated by THISISASH LTD, a company registered in England and Wales under company number 12230369, with its registered office at 1 Daws Place, Redhill, Surrey, RH1 2NZ, United Kingdom.

THISISASH LTD is the data controller for the information described in this policy. In this policy, "I" and "my" refer to THISISASH LTD.

You can contact me at any time about privacy or your data at ash@thisisash.com.

I am registered with the Information Commissioner's Office under registration number ZB036597.

1. Information I collect

Information you give me directly

  • Your name

  • Your email address

  • Your phone number, if you provide it

  • Your company or organisation name

  • Details of the project or enquiry you contact me about

  • Billing details needed to invoice you, such as a company name, billing address, and purchase order or reference number

I invoice by bank transfer. I never ask for and never hold your card details.

Information collected automatically when you visit the site

  • Your IP address

  • Browser type and version

  • Device type and operating system

  • Pages you visited and how long you spent on them

  • Referring website

2. Why I use it, and my lawful basis

Under UK GDPR I have to tell you the legal ground I rely on for each use of your data.

  • Replying to enquiries sent through the contact form or by email. To answer your question and discuss possible work. Lawful basis: legitimate interests, namely responding to someone who has contacted me about my services.

  • Delivering design and motion work, sharing files, and giving project updates. To carry out the work we have agreed. Lawful basis: performance of a contract.

  • Issuing invoices and keeping financial records. To get paid and to meet my accounting and tax obligations. Lawful basis: legal obligation, and performance of a contract.

  • Understanding how the site is used and improving it. To keep the site working well and see which work resonates. Lawful basis: legitimate interests, using aggregate and non-identifying analytics.

I do not send marketing emails and I do not run a mailing list. I do not use your information to make automated decisions about you, and I do not use it for profiling.

3. Cookies and analytics

I use Framer Analytics, which is built into the platform that hosts this site. It does not set cookies on your device and does not identify you individually. It gives me aggregate figures such as page views, referring sites, and rough location by country.

Because it does not track individuals, it runs without needing your consent.

Video embeds. The videos on this site are hosted by FrameRate and played through an embedded player loaded from framerate.tv. When a page containing a video loads, your IP address and basic browser information are shared with FrameRate so that the player can work, but no cookies are set at that point.

If you press play, the FrameRate player then sets cookies on your device in order to play the video and record playback information. Pressing play is what triggers this. If you would rather it did not happen, you can simply not play the videos, or block third-party cookies in your browser. What FrameRate does with that information is governed by their own privacy policy and is outside my control.

Beyond that, the only cookies this site may set are ones that are strictly necessary for it to work, for example to keep the site secure or remember a setting during your visit. I do not use advertising, marketing, or third-party tracking cookies.

You can block or clear cookies through your browser settings at any time, though doing so may stop the video player and other parts of the site from working properly.

4. Who I share your information with

I do not sell or rent your personal information to anyone.

I use a small number of service providers who process data on my behalf in order to run my business. These are:

  • Framer B.V., which hosts this website, provides its built-in analytics, and receives anything you submit through the contact form

  • Google Ireland Limited, whose Google Workspace service handles my email and calendar

  • FrameRate, which hosts the video work shown on this site and serves the embedded player

  • Monzo Bank Ltd, which I bank with and use to issue invoices and receive payment

Project files are stored on a private server at my business address in the United Kingdom, not in third-party cloud storage.

Each provider above is bound by a contract that requires them to keep your data secure and to use it only for the purpose I have instructed.

I may also share information where I am legally required to, for example with HMRC, my accountant, or in response to a lawful request from a regulator or court.

5. Where your information is stored

Project files and finished work are held on my own server in the United Kingdom.

Some of the providers listed above are based outside the United Kingdom. Framer is based in the Netherlands, and Google and FrameRate may process data in the United States and elsewhere.

Where personal data is transferred outside the UK, I make sure it is protected by an appropriate safeguard, either a UK adequacy decision covering that country, or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How long I keep it

  • Enquiries that do not lead to work: deleted within 12 months of our last contact.

  • Client project records and correspondence: kept for the duration of the project and for 2 years afterwards, so I can support work I have delivered.

  • Invoices and financial records: kept for 6 years after the end of the relevant accounting period, as required by UK tax law.

  • Analytics data: aggregate and non-identifying, retained by Framer as part of the hosting platform.

7. Security

I take reasonable technical and organisational measures to protect your information, including encrypted storage, access controls, and two-factor authentication on the accounts that hold client data. Project files are held on a private server at my business address rather than in shared cloud storage.

No method of transmitting data over the internet is completely secure, so I cannot guarantee absolute security, but I will notify you and the ICO where required if a breach occurs that puts your rights at risk.

8. Your rights

Under UK data protection law you have the right to:

  • Be informed about how your data is used, which is what this policy is for

  • Access the personal data I hold about you

  • Rectify data that is inaccurate or incomplete

  • Erase your data, in certain circumstances

  • Restrict how I process your data, in certain circumstances

  • Object to processing carried out on the basis of legitimate interests, and to direct marketing at any time

  • Data portability, meaning you can ask for a copy of data you gave me in a machine readable format

  • Withdraw consent at any time, where consent is the basis I rely on

To exercise any of these, email ash@thisisash.com. I will respond within one month.

If you are not happy with how I have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You are welcome to raise it with me first, but you do not have to.

9. Links to other sites

This site links to other websites, including client work, social profiles, and platforms where my work is hosted. I am not responsible for how those sites handle your data. Please read their own privacy policies.

10. Children

My services are aimed at businesses and are not directed at children. I do not knowingly collect personal information from anyone under 16.

11. Changes to this policy

I may update this policy from time to time. The current version is always the one published here, with the date it was last updated shown at the top.

If I make a change that significantly affects how I use your personal data, I will contact you directly where I hold your contact details, rather than relying on you to check this page.

12. Contact

THISISASH LTD
1 Daws Place, Redhill, Surrey, RH1 2NZ, United Kingdom
ash@thisisash.com