Privacy policy

Last updated: 30 October 2026

This policy explains what personal data we collect, why, and what you can do about it. We keep it short and plain.

Who we are

Mouriaux is a trading name of Graaftr Digital Studio Ltd, a company registered in England and Wales (company number 09979231). Registered office: Bayside Business Centre, 48 Willis Way, Poole, Dorset, BH15 3TB. We are the data controller for the personal data described here.

Questions about your data go to studio@mouriaux.com.

What we collect and why

• Enquiries. When you send an enquiry through our website or email us, we keep your name, email address, company and what you tell us, so we can reply and follow up. Lawful basis: legitimate interests, or steps before entering a contract.
• Newsletter. When you sign up, we keep your email address, first name and a record of your consent, so we can send you one email a month. Lawful basis: consent. You can unsubscribe at any time from the link in every email.
• Clients and suppliers. We keep contact, project and billing details to deliver work, invoice and meet our legal and tax obligations. Lawful basis: contract and legal obligation.
• Business contacts. We sometimes contact people at businesses we think we can help, using business contact details from public sources and B2B data providers. Lawful basis: legitimate interests. Every message lets you opt out, and we will not contact you again if you do.
• Meetings. If we take notes or record a call, we tell you at the start. Notes are used only to record what was agreed and follow up.

Who we share it with

We do not sell your data. We use trusted providers to run the business, who process data on our instructions:

• Website hosting and forms: Webflow
• Newsletter and contact records: HubSpot (data stored in the EU)
• Email, documents and calendar: Google Workspace
• Business contact data and outreach: Apollo
• Accounting and payments: Xero, Stripe and GoCardless
• Project management: Asana
• AI tools that help us draft and organise our work, used under business terms

We may also share data with our accountants, legal advisers or authorities where the law requires it.

International transfers

Some of these providers are based in the United States. Where data leaves the UK, we rely on recognised safeguards such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement and Addendum.

How long we keep it

• Newsletter: until you unsubscribe, after which we keep only enough to make sure we do not email you again.
• Enquiries and business contacts: up to 2 years after our last contact, unless we start working together.
• Client and billing records: 6 years after the end of the financial year they relate to, as required for tax.

Cookies

We do not use advertising or analytics cookies on this website. Our newsletter sign-up sends your email address straight to HubSpot and does not set cookies.

Your rights

Under UK data protection law you can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy to take elsewhere. Where we rely on consent, you can withdraw it at any time. Email studio@mouriaux.com and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.

Changes

We will update this page if anything changes. The date at the top shows the latest version.