Privacy & Cookie Policy

NOCTURN Creative Limited
Last updated: January 2026

1. Who We Are

NOCTURN Creative Limited is a company registered in Scotland. We operate two interlinked brands: NOCTURN (participatory dance and digital arts) and NOCTURN Designs (web design studio).

For the purposes of data protection law, NOCTURN Creative Limited is the data controller — meaning we determine how and why your personal data is processed.

Contact details:

NOCTURN Creative Limited1 High Street, Thatcham, West Berkshire RG19 3JG

Email: hello@nocturncreative.co.uk

If you have any questions about how we handle your data, please get in touch at the address above.

2. What Data We Collect and Why

We only collect personal data that is necessary for the purposes described below.

Enquiries and contact forms

When you contact us through our website or by email, we collect:

  • Your name

  • Your email address

  • Any information you choose to share in your message

Why: To respond to your enquiry. Our lawful basis is legitimate interests — it is reasonable for us to process this data to communicate with people who have chosen to contact us.

Email marketing

If you sign up to receive our newsletter or email updates, we collect:

  • Your name (if provided)

  • Your email address

Why: To send you updates about our work, projects, and events. Our lawful basis is consent — you opt in, and you can withdraw that consent at any time by clicking the unsubscribe link in any email or by contacting us directly.

We use Squarespace Email Campaigns to manage and send our email marketing. Your email address is stored on Squarespace's platform. See Section 5 for more about our third-party processors.

Website analytics

Our website is built on Squarespace, which automatically collects basic analytics data including:

  • Pages visited and time spent

  • General geographic location (country/region level)

  • Browser type and device type

  • Referring website

This data is aggregated and does not identify you personally. Our lawful basis is legitimate interests — understanding how our site is used helps us improve it.

3. How We Store Your Data

All personal data we hold is stored electronically. Specifically:

  • Enquiry and contact data is held in our Google Drive account, accessed only by NOCTURN Creative Limited's director.

  • Email marketing data (subscriber lists) is held within Squarespace Email Campaigns.

  • Website form submissions may be stored temporarily within the Squarespace platform before being transferred to Google Drive.

We do not hold paper records containing personal data.

Google Drive is provided by Google LLC and operates under Google's data processing terms. Google Drive data is subject to Google's Privacy Policy. We have enabled security features including two-factor authentication on our Google account.

4. How Long We Keep Your Data

We only keep your personal data for as long as it is needed:

Enquiry / contact messages - Up to 2 years from last contact

Email marketing subscribers - Until you unsubscribe, or we cease sending newsletters

Client project correspondence - Up to 6 years (in line with standard business record-keeping)

Website analytics - As per Squarespace's own data retention settings

When data is no longer needed, we delete it from Google Drive and any connected platforms.

5. Third-Party Data Processors

We work with the following third-party services that may process your personal data on our behalf. They act as data processors — meaning they only handle your data as we instruct them, for the purposes described in this policy.

Squarespace, Inc.

Our website is hosted on Squarespace. Squarespace may process data such as form submissions, analytics, and email subscriber data. Privacy Policy: squarespace.com/privacy

Google LLC (Google Drive)

We use Google Drive to store business correspondence and client information.Privacy Policy: policies.google.com/privacy

We do not sell your data to any third party. We do not share your personal data with anyone outside of the processors listed above without your explicit consent, unless we are required to do so by law.

6. Cookies

Cookies are small text files placed on your device when you visit a website. Our website uses cookies through the Squarespace platform.

Types of cookies used

Strictly necessary cookiesThese are essential for the website to function. They cannot be switched off. They include cookies that remember your preferences (such as cookie consent) and support basic site security.

Performance and analytics cookiesSquarespace uses cookies to collect anonymised information about how visitors use the site — for example, which pages are most visited. This helps us understand and improve our website. No personally identifying information is collected.

Functional cookiesThese cookies allow the site to remember choices you have made, such as form completion preferences.

Managing cookies

When you visit our website, you will be presented with a cookie consent banner. You can choose to accept or decline non-essential cookies at that point.

You can also manage or delete cookies through your browser settings at any time. Note that disabling cookies may affect the functionality of the website.

For more information about how Squarespace uses cookies, please visit: support.squarespace.com/hc/en-us/articles/360001989128

7. Your Rights Under UK GDPR

Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have the following rights:

  • Right of access — You can request a copy of the personal data we hold about you.

  • Right to rectification — You can ask us to correct inaccurate or incomplete data.

  • Right to erasure — You can ask us to delete your personal data in certain circumstances (sometimes called the "right to be forgotten").

  • Right to restrict processing — You can ask us to limit how we use your data in certain circumstances.

  • Right to data portability — Where processing is based on your consent, you can ask for your data in a portable, machine-readable format.

  • Right to object — You can object to us processing your data where we rely on legitimate interests as our lawful basis.

  • Right to withdraw consent — Where we process data based on your consent (e.g. email marketing), you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at hello@nocturncreative.co.uk. We will respond within one calendar month.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us in the first instance and we will do our best to resolve your concern.

If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

9. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.