Privacy

Privacy Policy

This Privacy Policy explains how Iris & Oak collects, uses and handles personal information when you visit the website, submit an enquiry or become a client.

Last updated: 11 September 2026

1. Who is responsible for your information?

Iris & Oak is responsible for the personal information collected through this website and through direct enquiries relating to its services.

If you have a question about this Privacy Policy or how your information is handled, you can contact Iris & Oak at iris@irisoak.dev.

2. Information I may collect

When you submit an enquiry through the Iris & Oak website, I may collect information that you choose to provide, including:

  • Your name
  • Your email address
  • Your business or organisation name
  • Your organisation type
  • The service you are interested in
  • Information about your website or proposed project
  • Your preferred project timeline
  • Your approximate budget
  • Any additional information you include in your enquiry

If you become a client, I may also collect information reasonably required to manage the project, communicate with you, prepare estimates or invoices and receive payment.

3. How your information is used

I may use your personal information to:

  • Review and respond to your enquiry
  • Discuss your project or requirements with you
  • Prepare estimates, proposals or invoices
  • Provide services that you have requested
  • Communicate with you about an active project
  • Maintain appropriate business and financial records
  • Meet applicable legal, accounting or tax obligations
  • Protect the website and business from misuse or security issues

Information submitted through an enquiry will not be added to a marketing mailing list simply because you contacted Iris & Oak.

4. Lawful basis for using your information

Iris & Oak only uses personal information where there is an appropriate lawful basis for doing so.

Depending on the circumstances, this may include processing that is necessary to take steps at your request before entering into a contract, processing required to perform a contract with you, compliance with legal obligations, or legitimate interests in operating and protecting the business.

5. Services that may process your information

Iris & Oak uses third-party services to operate the website and provide business services. Where relevant, these providers may process limited personal information on behalf of Iris & Oak or as part of providing their own services.

Vercel

The Iris & Oak Next.js website is hosted using Vercel. Vercel may process technical information as part of hosting, securing and delivering the website.

Iris & Oak also uses Vercel Web Analytics to understand how the website is used and to help improve its content, performance and user experience. The analytics service provides aggregated website statistics such as page views, referring websites, approximate geographic location, browser, operating system and device type.

Resend

Resend is used to support transactional email delivery, including emails associated with website enquiries.

Stripe

If you become a client, Stripe may be used for services such as estimates, invoicing and payment processing. Information required for those services may be processed by Stripe under its own privacy terms.

Iris & Oak does not currently collect card details directly through the public website.

Squarespace

Squarespace is currently used in connection with the Iris & Oak domain and DNS management. The Next.js application itself is hosted separately.

Other service providers may be introduced where reasonably necessary to operate Iris & Oak. This Privacy Policy will be updated where appropriate if the way personal information is handled materially changes.

6. International processing

Some technology providers used by Iris & Oak may process or store information outside the United Kingdom.

Where personal information is transferred internationally, the relevant provider and Iris & Oak are expected to use appropriate safeguards where required by applicable data protection law.

7. How long information is kept

General enquiries that do not become client projects will normally be retained for no longer than 12 months after the last meaningful communication, unless there is a legitimate reason to retain the information for longer.

If you become a client, some information may need to be retained for longer where necessary for project records, contracts, accounting, tax, dispute resolution or other legal obligations.

Information that is no longer reasonably required will be deleted or otherwise securely disposed of where appropriate.

8. Cookies, analytics and tracking

Iris & Oak uses Vercel Web Analytics to understand how visitors use this website and to help improve its content, performance and user experience.

Vercel Web Analytics does not use cookies for visitor analytics. It provides Iris & Oak with aggregated statistics such as page views, referring websites, approximate geographic location, browser, operating system and device type.

Vercel Web Analytics uses a temporary identifier generated from an incoming request rather than a persistent visitor identifier. Vercel states that this identifier is automatically reset after 24 hours and is not used to track visitors across different websites.

Analytics information is used only to understand website usage and improve the Iris & Oak website. It is not used for behavioural advertising or cross-site advertising tracking.

You can object to the use of Vercel Web Analytics on this website using the analytics opt-out control provided below.

Analytics are currently enabled on this device.

9. Your data protection rights

Depending on the circumstances and the lawful basis being relied upon, UK data protection law may give you rights relating to your personal information.

These may include the right to:

  • Ask for access to personal information held about you
  • Ask for inaccurate information to be corrected
  • Ask for your information to be deleted in certain circumstances
  • Ask for the use of your information to be restricted
  • Object to certain uses of your information
  • Request data portability where the right applies

Not every right applies in every situation. If you would like to make a request or ask a question about your information, contact iris@irisoak.dev.

10. Your right to object

Where Iris & Oak relies on legitimate interests to process your personal information, you may have the right to object to that processing.

To raise an objection, contact iris@irisoak.dev.

11. Complaints

If you have concerns about how Iris & Oak has handled your personal information, please contact me first so that I can investigate the issue.

You also have the right to raise a concern with the UK Information Commissioner's Office (ICO).

You can find information about making a data protection complaint through the Information Commissioner's Office.

12. Changes to this policy

This Privacy Policy may be updated as Iris & Oak develops, new services are introduced or the way personal information is handled changes.

The latest version will be published on this page together with its most recent update date.