Select Page

Privacy Policy

Last updated: 17 January 2026

GiggleFace (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website or engage with our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR).

1. Who We Are (Data Controller)

Business name: GiggleFace
Website: https://giggleface.co.uk
Contact email: please use the contact form
Business location: United Kingdom

For the purposes of data protection law, GiggleFace is the data controller responsible for your personal data.

We are not required to appoint a Data Protection Officer (DPO). If you have any questions about this policy or how your data is handled, please contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

a) Information you provide directly

  • Name

  • Email address

  • Business name (if applicable)

  • Order details and project information

  • Messages sent via contact forms or email

b) Automatically collected data

  • IP address

  • Browser type and device information

  • Pages visited and interactions with the website

  • Cookie data (see Cookie Policy)

c) Comments and media

  • Comments you leave on the website

  • IP address and browser user agent (for spam detection)

  • Profile image via Gravatar (if used)

3. How and Why We Use Your Data (Lawful Bases)

We only process personal data where we have a lawful basis to do so:

Purpose Data Used Lawful Basis
Responding to enquiries Name, email, message Legitimate interests
Providing commissioned artwork/services Name, contact details, order info Performance of a contract
Invoicing & record keeping Name, business details Legal obligation
Website analytics IP address, usage data Consent
Cookies (non-essential) Cookie identifiers Consent
Spam prevention IP address, comment data Legitimate interests

4. Cookies

We use cookies and similar technologies to ensure the website functions correctly and to analyse website usage.

  • Essential cookies are used on the basis of legitimate interests.

  • Analytics and marketing cookies are only used with your consent.

You can manage or withdraw your consent at any time via the cookie banner or settings.
For full details, please see our Cookie Policy:
👉 https://giggleface.co.uk/cookie-policy-eu/

5. Who We Share Data With

We may share your personal data with trusted third-party service providers, including:

  • Website hosting providers

  • Email service providers

  • Analytics providers (e.g. Google Analytics, if enabled)

  • Spam detection services (e.g. Akismet)

  • Payment or invoicing services (if applicable)

We only share data that is necessary and ensure appropriate data protection safeguards are in place.

6. International Data Transfers

Some of our service providers may process data outside the UK or EEA (for example, cloud services based in the United States).

Where this occurs, we ensure appropriate safeguards are used, such as:

  • UK/EU adequacy decisions

  • Standard Contractual Clauses (SCCs)

7. How Long We Keep Your Data

We retain personal data only for as long as necessary:

  • Enquiry data: up to 12 months after last contact

  • Client/order data: up to 7 years for legal and accounting purposes

  • Comments: retained unless and until deletion is requested

  • Analytics data: retained according to provider settings

  • Cookie data: as outlined in the Cookie Policy

8. Your Data Protection Rights

Under UK GDPR and GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time (where consent is the lawful basis)

To exercise any of these rights, please contact us using the contact form

9. Right to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority.

UK supervisory authority:
Information Commissioner’s Office (ICO)
https://ico.org.uk/

10. Children’s Data

This website and our services are not intended for children under the age of 16. We do not knowingly collect personal data from children.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the “Last updated” date revised accordingly.

Email Me: