Privacy policy

Who we are

Grotesque is a creative department for tech startups. In this policy, “we” and “us” mean Grotesque, run by Grotesque Ltd, 14 Bolam Close, Manchester, M23 0HZ, England, United Kingdom.

We decide how and why your personal data is used, so we are the controller of it. For any question about this policy or your data, email us at privacy@grotesque.ltd.

What we collect

When you book a call, our booking tool asks for your name, your email address and anything you choose to tell us about your team. We also get the time you picked.

When you email us, we get your email address and what you write.

When you visit the site, the services that deliver its fonts, pictures and booking calendar receive your IP address and basic browser details, as any website does. We do not use analytics or advertising tools, and we do not build profiles of visitors.

Why we use it, and our lawful basis

We use your booking details to hold the call, send you the invite and prepare for it. Our lawful basis is that you asked for the call, as a step before a possible contract.

We use your emails to reply to you. Our lawful basis is our legitimate interest in answering the people who contact us.

If you become a client, we use your details to run the work. Our lawful basis is our contract with you.

We never sell your data, and we do not send you marketing emails unless you ask for them.

Who we share it with

We use a few services to run the site and the calls. Each one handles your data only to provide its service to us:

• Cal.com, for bookings.
• Google, for the video call (Google Meet), the calendar invite and the site’s fonts (Google Fonts).
• Cloudinary, for the site’s pictures and videos.
• Cloudflare, which hosts the website.
• Google Workspace, for our email.

International transfers

Some of these services store data outside the UK, for example in the United States. Where they do, the transfer is covered by the UK’s adequacy regulations (such as the UK Extension to the EU–US Data Privacy Framework) or by the standard contractual clauses that the ICO approves.

How long we keep it

If a call or an email does not lead to work, we delete your details 12 months after we were last in touch.

If you become a client, we keep contracts, invoices and the records that go with them for 6 years after the end of the financial year they relate to, because UK tax law requires it.

We delete data when we no longer need it for the reasons above.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the data we hold about you,
• ask us to correct it,
• ask us to delete it,
• ask us to limit how we use it,
• object to how we use it, where our lawful basis is our legitimate interests,
• ask us to send it to you or another organisation in a common format.

To use any of these rights, email us. We reply within one month, and it costs nothing. We do not make decisions about you by automated means alone.

Cookies

The site itself sets no cookies, and we use no analytics or advertising cookies.

The booking calendar on our booking page comes from Cal.com. It may store small files in your browser so that the booking works. These are needed for the booking you ask for, so we do not ask for consent for them. Cal.com says it uses no third-party advertising cookies in its product.

How to complain

If you are unhappy with how we use your data, please tell us first, and we will try to put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

When we change this policy, we update it on this page and change the date at the top.