Privacy Policy

This policy explains how Eat With Your Eyes collects, uses and protects personal data when you visit eatwithyoureyes.co.uk, contact us, sign up to our mailing list, or work with us as a client or supplier.

Who we are

Eat With Your Eyes (UK) Limited is the data controller responsible for the personal data described in this policy.

Registered office: 2 Abbey Court, Fraser Road, Priory Park, Bedford, MK44 3WH

Company registration number: 08775519

Email: [email protected]

Telephone: 01234 838932

If you have any question about this policy or about how we handle your data, email us at [email protected].

What personal data we collect

When you complete our contact form: your first name, last name, email address, telephone number, the content of your message, and whether you opted in to marketing.

When you sign up to our mailing list: your first name, last name, company name and email address, together with records of your subscription, opens and clicks.

When you email or call us: your contact details and the content of your correspondence.

When you apply for a role with us: your CV, portfolio, contact details, work history and anything else you choose to send.

When you become a client or supplier: the names and contact details of the people we deal with, plus billing and payment records.

When you browse the website: your IP address, browser and device type, pages viewed, referring site and approximate location, collected through cookies and similar technologies where you have consented. See our cookie policy for the full detail.

Why we use it, and our lawful basis

• Replying to your enquiry and preparing a proposal. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding to people who approach us.
• Delivering projects and managing the client relationship. Lawful basis: performance of a contract, or our legitimate interest where the contract is with your employer rather than with you personally.
• Sending our newsletter and marketing emails. Lawful basis: your consent. You can withdraw it at any time using the unsubscribe link in any email, or by emailing us.
• Measuring how the website is used so we can improve it. Lawful basis: your consent, given through the cookie banner.
• Protecting our forms from spam and abuse. Lawful basis: our legitimate interest in keeping the site secure.
• Considering job applications. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in recruiting.
• Keeping accounting and tax records. Lawful basis: compliance with a legal obligation.

Where we rely on legitimate interests, we have weighed our interests against your rights and concluded that our use of your data is proportionate and would not surprise you. You can ask us for details of that assessment.

Who we share it with

We do not sell your personal data. We share it only with the service providers who help us run the business, and only so far as they need it:

• Microsoft (Microsoft 365): our email and document platform, which receives contact form submissions and stores our correspondence.
• Intuit Mailchimp: our email marketing platform, which stores mailing list subscriber data.
• Google (Tag Manager and Analytics): website analytics, where you have consented to analytics cookies.
• Cloudflare (Turnstile): spam protection on our forms.
• Vimeo: the video player embedded on our pages, which sets cookies where you have consented.
• Vultr and RunCloud: our website hosting and server management.
• Our accountant and professional advisers, where needed for accounts, tax or legal advice.

We may also disclose personal data where we are legally required to do so, or to establish, exercise or defend legal claims.

Transfers outside the UK

Some of the providers listed above are based in the United States or process data there. Where personal data leaves the UK, we rely on one of the safeguards permitted under UK data protection law, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement. You can ask us which safeguard applies to a particular transfer.

How long we keep it

• Enquiries that do not become projects: 24 months from your last contact with us.
• Client project files and correspondence: 7 years from the end of the engagement.
• Accounting and tax records: 6 years from the end of the relevant financial year, as required by HMRC.
• Mailing list data: until you unsubscribe, and for a short period afterwards so we can honour your opt-out.
• Unsuccessful job applications: 6 months from the outcome, unless you agree to us keeping your details on file for longer.
• Website analytics: up to 26 months.

Where a retention period has passed we delete the data or anonymise it so it can no longer identify you.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal data we hold about you;
• Have inaccurate data corrected;
• Ask us to delete your data in certain circumstances;
• Ask us to restrict how we use your data;
• Object to processing we carry out on the basis of legitimate interests;
• Object to direct marketing at any time, with no exceptions;
• Receive your data in a portable format where we rely on consent or contract; and
• Withdraw your consent at any time, which does not affect anything we did before you withdrew it.

To exercise any of these rights, email [email protected]. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

Cookies

We use cookies and similar technologies on this website. Non-essential cookies are only set once you have given consent through our cookie banner, and you can change or withdraw that consent at any time. Full details are in our cookie policy.

Security

We use technical and organisational measures appropriate to the risk, including encrypted connections to our website, access controls on our systems, and multi-factor authentication on our email and hosting accounts. No system is completely secure, but we take the protection of your data seriously and review our measures regularly.

Automated decision-making

We do not make decisions about you using automated processing alone, and we do not carry out profiling that produces legal or similarly significant effects.

Children

Our website and services are aimed at businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy

We review this policy regularly and will update it when our practices or the law change. Our policy was last updated: August 2026. Where a change materially affects how we use your data, we will tell you directly.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right - [email protected].

If you remain unhappy, you also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. You can find information about making a complaint at the ICO website.