Last updated:
Who we are
Lowe Design is a creative agency run by Johnny Lowe, our founder, building branding, websites, SEO and AEO for businesses across the UK. We are the controller of the personal data described here, which means we decide how it is used and we are responsible for it.
Lowe Design21 Adelaide Avenue, Coleraine, BT52 1LT
Northern Ireland, United Kingdom
enquiries@lowedesign.io
Questions about your data go to the same email, or use the contact page.
What we collect
- Enquiries. When you use the contact form we collect your name, email, phone number and business name if you give them, what you need and your project details.
- AEO scans. When you use the AEO scanner we collect your name, email, the website you scanned, its results, and whether you are happy for us to get in touch.
- Messages. If you email, phone or message us on WhatsApp, we keep the conversation and your contact details so we can reply. WhatsApp handles messages under its own privacy policy.
- Analytics, if you accept. Pages visited, how you got here, rough location, device and browser, and anonymised clicks and scrolling. Nothing loads until you choose "Accept analytics".
Why we use it, and our lawful basis
We use enquiry, scan and message details to reply to you, quote for work and run projects. Our lawful basis is taking steps at your request before a contract, or our legitimate interest in answering people who contact us. We only use them for marketing if you have asked us to.
We use analytics to see which pages help people and fix the ones that do not. Our lawful basis is your consent, which you can withdraw at any time.
Who we share it with
We never sell your data. These services process it for us, under their own terms and data protection agreements:
- Vercel hosts this website. Like any web host, its servers see your IP address and the pages you request, and keep short-lived logs for security.
- Kaizen the system we use to manage enquiries and clients. Contact form enquiries are stored there.
- Cloudflare Turnstile checks the contact form is being filled in by a person, not a spam bot.
- Resend sends us email notifications, such as a new AEO scan, or an enquiry if Kaizen is unavailable.
- Sanity runs our content system. It stores AEO scanner results and serves the images you see on the site.
- Google Analytics measures visits and popular pages, only if you accept analytics cookies.
- Microsoft Clarity shows anonymised clicks and scrolling so we can spot where pages confuse people, only if you accept analytics cookies.
- Vimeo and YouTube play the videos on our home page and some case studies. Vimeo runs with its do not track setting on, YouTube in its privacy-enhanced mode, and case study videos only load when you press play.
Some of these providers are based in, or use servers in, the United States. Where data leaves the UK, they rely on recognised safeguards such as the UK extension to the Data Privacy Framework or standard contractual clauses. You can read Google's privacy policy and the Microsoft privacy statement for how they handle analytics data.
How long we keep it
- Enquiries, scan results and messages: 2 years from our last contact, unless you become a client. Client records are kept for as long as we work together and then as long as the law requires for tax and accounts.
- Analytics: as set by each provider's default retention. Google Analytics keeps event data for 2 months by default, and Microsoft Clarity keeps recordings for 30 days.
Cookies
Cookies are small files a site saves in your browser. We only set analytics cookies if you accept them. If you reject, the only cookie we set is the one that remembers your choice. We also save your light or dark theme in your browser's local storage, which stays on your device.
| Cookie | Set by | What it is for | How long |
|---|---|---|---|
| ld_consent | Lowe Design | Remembers whether you accepted or rejected analytics cookies. | 6 months |
| _ga | Google Analytics | Tells one visitor apart from another, so visits can be counted. | 2 years |
| _ga_J6NTZ6W20W | Google Analytics | Keeps track of your current visit. | 2 years |
| _clck | Microsoft Clarity | Remembers a random Clarity ID, so repeat visits are linked. | 1 year |
| _clsk | Microsoft Clarity | Joins the pages you view into one session. | 1 day |
Microsoft may also set its own cookie on the clarity.ms domain when Clarity runs. To change your mind, use the cookie settings button here or at the bottom of every page. If you switch to reject, analytics stop and we delete the Google Analytics and Clarity cookies on our domain.
Your rights
Under UK GDPR you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to fix anything that is wrong or incomplete.
- Deletion: ask us to delete your data where we have no good reason to keep it.
- Objection: object to us using your data on the basis of legitimate interests.
- Restriction: ask us to pause using your data while a concern is looked into.
- Portability: ask for data you gave us in a format you can take elsewhere.
- Withdrawing consent: change your mind about analytics cookies at any time.
To use any of these, email enquiries@lowedesign.io. It is free, and we will reply within one month. We may ask you to confirm who you are first.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk.
Changes to this policy
When we change how we use data, we update this page and the date at the top.