PRIVACY & COOKIES

Last updated 13 August 2026

We're LITTLEOCEANS, a web design studio in Bedford, England. This page explains what we collect when you use this website, why we collect it, and how to make us delete it. We've written it the way we write everything else here: plainly, and without a wall of small print.

For the purposes of UK data protection law, LITTLEOCEANS is the data controller for the information described below. Here is exactly who that is, because you have a right to know who holds your details and where to find them.

Ask by email and we'll send our address for service in writing, so anything official can reach us. For anything on this page, email is faster.

What we collect

There are only two ways this website collects anything about you.

• When you fill in the contact form. We collect your name, your business name, your email address, your phone number if you choose to give it, and whatever you write in the message box. Nothing on that form is collected that you haven't typed in yourself.
• When you look at a page. We count the visit with Cloudflare Web Analytics: which page, which country, roughly which browser and device, and which site you came from if you followed a link. That is the whole list. It sets no cookies, stores nothing on your device, and there is nothing in it that identifies you or recognises you on a second visit. We use it to see which case studies people actually read.

There is no cookie banner on this site, because there are no cookies to ask you about. We used to run Google Analytics, which needed both. We swapped it in August 2026 for Cloudflare Web Analytics, which counts visits without storing anything on your device and without building a profile of you. Nothing is set, nothing is read, and there is no choice for you to make or for us to remember.

It also means Google is no longer involved in this website at all. No tag, no fonts, no embeds. If you would rather Cloudflare received nothing either, any tracker blocker (uBlock Origin, Firefox's strict mode, Safari's protections) stops the beacon outright, and the site works exactly the same without it.

Why we're allowed to hold it

• Enquiries: our legitimate interest in replying to someone who has asked us to get in touch, and in keeping a record of a quote we've given.
• Analytics: our legitimate interest in knowing roughly how many people the site reaches and which pages they read. There is no consent to give or withdraw, because nothing is stored on your device and nothing collected identifies you.

Who else sees it

We don't sell your data, and we never will. A small number of services handle it on our behalf in order to make the website work:

• Formspree delivers the contact form to our inbox. Their privacy notice is at formspree.io/legal/privacy-policy.
• Cloudflare hosts this website and counts the visits, as described above. They also keep short-lived server logs containing IP addresses for security and abuse prevention. Their notice is at cloudflare.com/privacypolicy.

Some of these companies are based outside the UK. Where that's the case, the transfer is covered by the UK's International Data Transfer Addendum or an adequacy decision.

One thing worth saying because most sites don't: the fonts on this website are served from our own server rather than from Google Fonts. Most sites hand your IP address to Google the instant a page renders, purely to fetch a typeface. This one doesn't. As of August 2026 nothing on this website contacts Google at all.

How long we keep it

• Enquiries: up to two years after our last contact with you, then deleted. If the enquiry becomes a project, we keep what we need for our business records for six years, because HMRC requires it.
• Analytics: Cloudflare keeps the aggregated visit counts on a rolling basis and there is nothing in them tied to you, so there is nothing about you in there to delete.

Your rights

Under UK GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, or object to us using it at all. Email [email protected] and we'll sort it within a month, usually the same week. It costs nothing.

If you think we've handled your data badly, please tell us first so we can put it right. You also have the right to complain directly to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Cookies, specifically

This site sets no cookies. Not one, not for anybody, ever. Not for analytics, not for advertising, not to remember a preference. There are no tracking pixels and no third-party embeds anywhere on it either, and nothing here feeds an ad profile because we don't advertise.

That is also why there is no cookie banner and no "reset my choice" button: both existed on this page until August 2026, and both became pointless the day the last cookie went.

Changes

If we change how any of this works we'll update this page and move the date at the top. If we ever add anything that stores something on your device, we'll ask you first rather than doing it quietly.