Drift Creative Systems – Website Privacy Policy
Who we are
This policy explains how Drift Creative Systems uses personal data when you visit driftcreativesystems.co.uk, fill in our contact or demo form, or email us.
Drift Creative Systems is a trading name of [legal entity name], registered in England and Wales under company number [number], at [registered address]. We are the controller of the personal data described here, and we’re registered with the Information Commissioner’s Office under number [ICO registration number].
This policy covers our marketing website only. If you use one of our apps, that app’s own privacy notice also applies:
- Drift Hub and Drift: Surface: privacy notice
- Other Drift apps: each app links to its own notice when it launches
Artist websites built with Drift: Surface are run by the artist or their label, who are responsible for the data those sites collect.
What we collect and why
We only collect what we need to reply to you and to understand how the site is used. We never sell your data.
| Data | When we collect it | Why we use it | Lawful basis (UK GDPR) |
|---|---|---|---|
| Name, email address, the app you’re interested in, and your message | When you use the contact or demo form | To reply, arrange a demo and follow up on your enquiry | Legitimate interests (answering people who contact us), or steps before a contract |
| Anything you send us by email | When you email us | To reply and keep a record of our conversation | Legitimate interests |
| Pages visited, time on site, device and browser type, approximate location (town or region), and how you found us | When you browse the site, only if you accept analytics cookies | To see which pages are useful and improve the site | Consent |
| IP address and technical logs | Automatically, when your browser requests a page | To keep the site secure and working | Legitimate interests |
Marketing. We’ll only send you news about Drift if you ask us to, and every email has an unsubscribe link. Asking about a demo doesn’t sign you up to anything.
Spam protection. Our form uses a hidden spam-trap field to block bots, without tracking you.
Cookies and analytics
We use Google Analytics to understand how people use the site, but only after you say yes in the cookie banner. If you say no, or ignore the banner, no analytics cookies are set. You can change your choice at any time using the Cookie settings link in the footer.
We don’t use advertising, retargeting or social media tracking cookies.
| Cookie | Set by | Purpose | Lasts | Needs consent? |
|---|---|---|---|---|
| [cookie banner’s own cookie, e.g. cmplz_*] | Our website | Remembers your cookie choice | 1 year | No, strictly necessary |
| _ga | Google Analytics | Distinguishes visitors | 2 years | Yes |
| ga[ID] | Google Analytics | Keeps track of your session | 2 years | Yes |
Google Analytics is set up so that IP addresses aren’t stored, and Google Signals and advertising features are switched off. Google processes this data for us under its data processing terms. See Google’s privacy policy for more.
You can also block or delete cookies in your browser settings. The site works fine without them.
Who we share it with
We use a few trusted suppliers to run the site and reply to you. Each is bound by contract to protect your data and use it only on our instructions.
| Supplier | What they do | Where |
|---|---|---|
| [Hosting provider] | Hosts the website and stores form submissions | [UK / EEA] |
| [Email provider, e.g. Google Workspace or Microsoft 365] | Our email | [Location] |
| Website analytics (only with your consent) | USA | |
| [CRM or project tool, if used for enquiries] | Keeps track of enquiries and demos | [Location] |
We may also share data if the law requires it, or to protect our rights or the safety of others.
Where a supplier handles data outside the UK, we make sure it’s protected by UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or an equivalent safeguard.
How long we keep it
| Data | Kept for |
|---|---|
| Enquiries and emails that don’t lead to work | 2 years after our last contact |
| Enquiries that become a client relationship | For the length of the relationship, then as set out in that app’s privacy notice |
| Analytics data | 14 months, then deleted automatically by Google Analytics |
| Server logs | Up to 90 days |
Keeping it safe
The site only runs over HTTPS. Form submissions are stored on our server and only our team can see them. We keep our software up to date and limit access to the people who need it.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that’s wrong;
- delete your data;
- restrict or object to how we use it, including stopping any marketing straight away;
- give you your data in a portable format;
- withdraw your consent to analytics at any time, using Cookie settings in the footer.
Email privacy@driftcreativesystems.co.uk. We’ll reply within one month, and there’s normally no charge.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We’ll post any changes on this page and update the date at the top.
Contact
Drift Creative Systems, [registered address] privacy@driftcreativesystems.co.uk