Privacy policy
Plain English, because a policy nobody reads protects nobody. This describes what we actually do with your data, not what a template says.
Last updated 20 July 2026
Who we are
G&Co Studio is a brand and product design studio based in Hatton, Warwickshire. We're the data controller for information collected through this website. You can reach us at hello@gand.co.
What we collect, and only when you give it to us
We don't collect anything about you as you browse. There's no analytics on this site, no tracking pixels, no advertising tags and no profiling. If you read every page here and leave, we have no record that you visited.
There are exactly two ways we end up with your data.
If you send an enquiry
The contact form collects your name, email address, company name if you give one, an indication of budget if you choose to give one, and whatever you write in the message. We use it to reply to you and to discuss a possible project. Nothing else.
The lawful basis is legitimate interest: you contacted us about work, so replying is what you'd reasonably expect. Enquiries are processed by Netlify, who host this site, and reach us by email through Google Workspace.
We keep enquiries for two years from our last contact, then delete them. If a project goes ahead, the records become part of our normal business and accounting records and are kept for as long as UK law requires.
If you sign up to the newsletter
We collect your email address, nothing more. The lawful basis is consent, which you give by signing up and can withdraw at any time.
Newsletter subscriptions are handled by Buttondown, who store the list and send the emails on our behalf. Every email includes an unsubscribe link that works immediately. We don't sell, rent or share the list with anyone, and we don't use it for anything other than the newsletter.
You stay on the list until you leave. If you unsubscribe, Buttondown keeps a record of your address purely to make sure we don't email you again by accident.
Who else is involved
A small number of companies process data on our behalf. Each is bound by a contract to protect it and to use it only as we instruct.
- Netlify, who host the site and process form submissions.
- Buttondown, who manage the newsletter list and send it.
- Google Workspace, where our email lives.
Some of these are based in the United States. Where data leaves the UK, it's protected by the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.
One thing worth being straight about: this site loads its typeface from rsms.me, which means your browser makes a request to that server and it will see your IP address. We're moving to self-hosted fonts to remove that.
Your rights
Under UK GDPR you can ask us to:
- tell you what data we hold about you, and give you a copy
- correct anything that's wrong
- delete it
- stop or limit how we use it
- send it to you or someone else in a portable format
- stop processing based on legitimate interest, where you object
Email hello@gand.co and we'll respond within one month. There's no charge.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We'd rather you told us first so we can fix it.
Keeping it safe
The site is served over HTTPS. Access to enquiry and newsletter data is limited to people who need it, which is currently a very short list. We don't hold payment details, and we'd never ask for them by email.
Changes to this policy
If what we do changes, this page changes with it and the date at the top updates. If we ever add analytics or anything that tracks you, we'll say so here and ask for consent first.