Background
CoCreate Design and Marketing Ltd understands that your privacy is important and that you care about how your personal data is used. We respect and value the privacy of everyone who visits our website(s), www.cocreate.co.uk (“our Site”), and we will only collect and use personal data in ways that are described in this Policy, and in a way that is consistent with our obligations and your rights under data protection law.

Please read this Privacy and Cookies Policy carefully and ensure that you understand it. Your acceptance of this Policy is deemed to occur upon your first use of our Site. If you do not accept and agree with this Policy, you should stop using our Site immediately.

1. Information About Us
Our Site is owned and operated by CoCreate Design and Marketing Ltd, a limited company registered in England under company number 06718306. Registered address: 1 Carr Lane, Hoylake, Wirral, CH47 4BG.
Main trading address: 1 Carr Lane, Hoylake, Wirral, CH47 4BG.
VAT number: 909 9968 50.
Email address: [email protected]
Telephone: 0151 632 3527

For the purposes of data protection law, CoCreate Design and Marketing Ltd is the Data Controller of your personal data.

⸻

2. What This Policy Covers

This Privacy and Cookies Policy applies only to your use of our Site. Our Site may contain links to other websites. We have no control over how your data is collected, stored, or used by other websites and recommend that you check their privacy policies before providing any data to them.

⸻

3. What Is Personal Data?

Personal data is defined in the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 as any information relating to an identifiable individual. Personal data covers obvious details such as your name and contact information, as well as less obvious identifiers such as IP addresses and online identifiers.

⸻

4. Your Rights

Under the UK GDPR you have the following rights:
• To be informed about how we collect and use your personal data.
• To access the personal data we hold about you.
• To have inaccurate or incomplete personal data corrected.
• To request the deletion of your personal data.
• To restrict the processing of your personal data.
• To object to us using your personal data for specific purposes.
• To request a copy of your personal data in a portable format.
• Rights relating to automated decision-making and profiling (we do not use your data in this way).

Further information about your rights can be obtained from the Information Commissioner’s Office (ICO). You also have the right to lodge a complaint with the ICO (www.ico.org.uk).

⸻

5. Data We Collect

Depending on your use of our Site, we may collect the following information:
• Name, address, email address, telephone number
• Business name, job title, profession
• Payment information
• IP address, browser type and version, operating system
• Information about your preferences and interests
• Website usage data (including referring/exit pages, geolocation, and session data)

⸻

6. How We Use Your Data

We will always have a lawful basis for processing personal data. This may be because it is necessary for a contract with you, because you have consented, or because it is in our legitimate business interests. Your personal data may be used for:
• Providing and managing your account or enquiries
• Personalising your experience on our Site
• Providing our services and tailoring them to you
• Communicating with you (including responding to emails or calls)
• Supplying you with information you have opted-in to receive (you may unsubscribe at any time)
• Analysing your use of our Site to improve its functionality and your experience

With your permission, we may use your personal data for marketing, including contacting you by email, phone or post with information about our services. You will never receive unlawful marketing or spam, and you can opt-out at any time.

⸻

7. How Long We Keep Your Data

We will not keep your personal data for longer than necessary. Typical retention periods are:
• Financial records – seven years
• Website and email enquiries – up to two years
• Job applications – up to one year
• Other personal data – normally up to one year unless required longer for legal or contractual purposes

⸻

8. How and Where We Store or Transfer Your Data

We will primarily store your personal data in the UK or European Economic Area (EEA). Where our service providers (such as Microsoft, Google, or other cloud providers) process data outside the UK/EEA, appropriate safeguards are applied, including the use of Standard Contractual Clauses (SCCs) or equivalent protections.

We protect your data through technical and organisational measures, including:
• Secure collection and transfer of data
• Storage in secure systems with access controls
• Encryption and secure backup procedures
• Regular monitoring and ISO 27001-certified information security management

⸻

9. Sharing Your Personal Data

We will treat your personal data as confidential. We may share it with:
• Service providers acting under contractual agreements (e.g. IT/cloud providers)
• HMRC or other statutory authorities where legally required
• Regulators, law enforcement, or public authorities where required by law
• Third parties where necessary to investigate or prevent crime or fraud

We will not sell, lease, or trade your data to third parties.

⸻

10. Accessing Your Data

You can request a copy of the personal data we hold about you (“subject access request”). Requests should be made in writing to the contact details below. We normally respond within one month.

⸻

11. Cookies

Our Site uses Cookies and similar technologies to improve your experience and services. You will be asked to provide consent before non-essential cookies are placed. You can withdraw consent at any time.

Cookie we use:

Essential cookies – required for the operation of our Site
• PHPSESSID – session cookie used by our web application to maintain user session variables (expires when browser closes).
• _cookie_c – records acceptance of essential cookies (30 days).

Analytics cookies – to understand how our Site is used (Google Analytics)
• _ga (Google Analytics) – distinguishes users (2 years).
• _ga_<container-id> (Google Analytics) – persists session state (2 years).
• _cookie_analytics_c – records acceptance of analytics cookies (30 days).

Functionality cookies – to improve user experience (e.g. remembering preferences)
• __atuvc (AddThis) – enables social sharing, stores updated share count (1 year).
• mf_user (Mouseflow) – indicates if visitor is new or returning (90 days).
• mf_[session] (Mouseflow) – identifies the browser session, expires at end of session.

You can control or delete cookies through your browser settings. Please note disabling cookies may affect functionality.

⸻

12. Contact Us

To contact us about data protection, including exercising your rights, please use:
Email: [email protected]
Telephone: 0151 632 3527
Post: Privacy Officer, CoCreate Design and Marketing Ltd, 1 Carr Lane, Hoylake, Wirral, CH47 4BG

⸻

13. Changes to this Policy

We may update this Privacy and Cookies Policy from time to time. Any changes will be published on our Site. You are deemed to have accepted the terms on your first use of our Site following changes. We recommend checking this page regularly.