Privacy policy
Last updated: 22 October 2026
This page explains what personal information ZOOSH ME! collects when you use this site or get in touch, why, how long we keep it and what your rights are. The short version: we collect what we need to reply to you and do the work, we don't sell it, and we don't track you around the web. If anything here is unclear, email contact@zoosh.me.
1. Who we are
ZOOSH ME! is a creative studio in Glasgow. Under UK data protection law, the data controller for your personal information is:
ZOOSH ME! LTD, a private limited company registered in Scotland, company number SC542861Registered office: 65 Bath Street, Suite 2/6, Glasgow G2 2BX
Email: contact@zoosh.me
Phone: 0141 673 7773
ICO registration number: [FILL IN: ICO registration number]
We are a two-person studio, so we haven't appointed a Data Protection Officer; the law doesn't require one at our size. Privacy questions go to contact@zoosh.me and one of us answers them.
2. What we collect
What you give us
| Where | What we collect |
|---|---|
| Start a project form (/start) | What kind of business you run, your name, your business name, your email address and whatever you choose to tell us about your situation. |
| Enquiry and book-a-call forms on our service and "For…" pages | Your name, your business name, your email address, your message and, on some forms, when suits you for a call. |
| "Read a chapter" form (menu design page) | Your email address, so we can send you the chapter. |
| Journal newsletter (/journal) | Your email address, so we can send you new journal entries. |
| Booking a call (on Calendly) | Your name, your email address, the time you pick and any notes you add. You give these to Calendly on its own site; see section 6. |
| Emailing or phoning us | Your email address or phone number, and whatever you tell us. |
| Working with us as a client | Contact details for you and your team, billing details, and what you share with us for the project: menus, photos, logos, copy. |
Please don't send us sensitive information, such as health details, through our forms. We don't need it and never ask for it.
What is collected automatically
When you visit, our host Vercel records standard technical details in its server logs, such as your IP address, browser and the pages you requested. They keep the site running and protect it from misuse.
Our forms also carry a hidden "leave this field empty" box. It is a spam trap: automated bots fill it in and people don't, so we can drop spam without making you solve a puzzle. It collects nothing about you.
3. Why we use it, and our legal basis
The law says we need a valid reason, a "lawful basis", for each use of your information. These are ours:
| What we do with it | Lawful basis |
|---|---|
| Reply to your enquiry, send you a quote or arrange a call | Legitimate interests (answering people who contact us), or steps before a contract when you ask us to quote for work |
| Do the project you hired us for, invoice you and keep in touch about it | Contract |
| Send you the book chapter you asked for | Consent (you asked for it) |
| Send you journal entries by email | Consent. Unsubscribe any time by replying or emailing us |
| Keep business and tax records | Legal obligation (HMRC requires us to keep them) |
| Count page views, keep the site secure and filter out spam | Legitimate interests |
We never sell your personal information, and we don't use it for automated decisions or profiling.
If you have asked us about a project, we may now and then email you about similar work we do, such as social media management, strategy or content creation. We only do this where the law allows it, and every one of those emails lets you opt out.
4. Cookies and analytics
This site sets no cookies. That is why you haven't seen a cookie banner.
We count page views with Vercel Web Analytics. It works without cookies and doesn't follow you to other sites. Instead of an identifier stored on your device, it uses a short-lived code worked out from your request, which is thrown away within a day. We see totals, such as how many people visited a page and which country they came from, never who you are.
Our fonts are served from our own site, and the "Book a call" button is a plain link, so no other company's code loads on our pages. When you click through to Calendly, LinkedIn, Facebook or Instagram, those sites set their own cookies under their own policies.
5. How long we keep it
| Information | How long we keep it |
|---|---|
| Enquiries that don't turn into a project | 12 months after our last contact, then deleted |
| Client project files and correspondence | 6 years after the project ends, in case of questions or claims, then deleted |
| Invoices and financial records | 6 years from the end of the financial year they belong to, as HMRC requires |
| Journal subscribers | Until you unsubscribe. After that we keep only your email address on a do-not-send list, so we never email you again by mistake |
| Book chapter requests | 12 months, unless you also join the journal or become a client |
| Server logs | 30 days |
6. Who we share it with
Only with the services that help us run the studio. They work on our instructions, must keep your data secure, and can't use it for their own purposes.
| Service | What they do for us |
|---|---|
| Vercel | Hosts www.zoosh.me and the client sites we build, and counts page views with Vercel Web Analytics (see section 4) |
| Resend | Delivers what you send through our forms to our inbox, as an email |
| Google Workspace | Our email, so everything you send to contact@zoosh.me is stored there |
| Calendly | Runs our booking page. Calendly also decides some things about your data itself; see Calendly's privacy notice |
| Xero and Starling Bank | Invoicing, payments and keeping our accounts |
| iCloud, Tigris and GitHub | Storing client project files: designs, photos, copy and code |
We link to our pages on LinkedIn, Facebook and Instagram. If you follow us or message us there, the platform handles your data under its own policy, and we only see what it shows us.
We may also share information when the law requires it, for example with HMRC or under a court order, and with professional advisers such as our accountant or lawyer.
7. Data stored outside the UK
Several of the services above, such as Vercel, Resend, Calendly, Google, Apple (iCloud), GitHub and Tigris, are based in the United States or may store data there. When your information leaves the UK, it is protected by an approved safeguard: the UK–US Data Bridge, the UK International Data Transfer Addendum, or a UK adequacy decision for the country it goes to.
8. How we keep it safe
Our forms only accept submissions sent from this site, and what you type is cleaned before it reaches our inbox, so it can't carry code with it. Only the two of us can read what you send. No system is perfectly secure, but if a breach ever puts your information at risk, we will tell you, and the ICO where the law requires it.
9. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you, and get a copy of it
- correct information that is wrong or incomplete
- delete your information (the "right to be forgotten")
- restrict how we use your information
- object to us using your information, including for marketing (we always stop when you ask)
- move your information to another provider in a common format
- withdraw your consent at any time, where we rely on it. This doesn't undo anything we did before
To use any of them, email contact@zoosh.me. It's free, and we reply within one month. We may ask you to confirm who you are first.
10. Children
We work with businesses, and we don't knowingly collect information from anyone under 16. If you think a child has sent us their details, tell us and we will delete them.
11. Complaints
If you're unhappy with how we have handled your information, tell us first at contact@zoosh.me and we'll put it right.
You can also complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113.
12. Changes to this page
We update this page whenever the way we use personal information changes, for example when we add a new tool to the site. The date at the top shows the last change. If a change matters, we will say so on the site or email the people it affects.