Privacy Policy

Last updated: 18 September 2026

Controller and contact details

The data controller for personal data collected through lovelysybrightiu.world is Gvg Contracting Ltd, Company No. 10023924, with its registered office at 14 Cowley Road, Oxford OX4 1JB, United Kingdom. You can contact us regarding data protection matters by email at [email protected] or by post at the address above.

Scope of this policy

This Privacy Policy explains how Gvg Contracting Ltd collects, uses, stores and protects personal data in connection with lovelysybrightiu.world. It covers data collected when you visit this website, use the contact form and interact with any features that involve the processing of personal information. It should be read alongside our Cookie Policy, which covers the use of cookies and similar technologies in detail.

Purposes and legal bases (Art. 6 GDPR)

We process personal data for the following purposes and on the following legal bases under the UK GDPR and the Data Protection Act 2018. We process data submitted through the contact form to respond to your enquiry (legitimate interests, Art. 6(1)(f), or performance of a contract where the enquiry relates to a service). We process data necessary for the technical operation of the website, including server logs, on the basis of legitimate interests (Art. 6(1)(f)). Where you have given consent through the cookie preference banner, we process data for statistical and marketing purposes on the basis of consent (Art. 6(1)(a)). We process data in connection with paid services on the basis of contract performance (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) where required by UK tax law.

Categories of data and sources

The categories of personal data we may collect include: contact information (name, email address, telephone number where voluntarily provided); the content of messages submitted through the contact form; technical data automatically collected when you access this website (IP address, browser type, pages visited, timestamps); and cookie preference records. We collect this data directly from you when you use the contact form, and automatically through standard web server logging when you visit any page. We do not purchase or otherwise obtain personal data about you from third-party sources.

Contact form and newsletter

When you submit the contact form on lovelysybrightiu.world, we collect your name, email address, the subject and content of your message, and your consent record. This data is used solely to respond to your enquiry. We do not add contact form submissions to any mailing list without a separate, specific consent. lovelysybrightiu does not currently operate a newsletter or subscription email service; if this changes, this policy will be updated accordingly.

Hosting and server logs

This website is hosted by a European hosting provider. Standard web server logs are automatically generated when you access any page; these logs may contain your IP address, the page requested, the date and time of the request, the HTTP response code and the referring URL. Server logs are retained for a maximum of 30 days for security and diagnostic purposes and are then deleted. They are not used for profiling or behavioural analysis.

Web fonts and external resources

This website loads typeface files from Google Fonts, a service provided by Google LLC. When your browser requests a font file, your IP address and browser information are transmitted to Google's servers as part of the standard HTTP request. This constitutes a limited transfer of personal data. We use Google Fonts because no suitable self-hosted alternative is available for these specific typefaces. Google's privacy practices are described at policies.google.com/privacy. No other external resources that involve the transmission of personal data are loaded by this website without your consent.

Cookies (reference to cookie policy)

This website uses cookies and similar technologies. Full details of the cookies used, their purposes, durations and the consent mechanism are set out in our Cookie Policy. Strictly necessary cookies are used on all pages without consent. Statistical and marketing cookies are only placed after you give your consent through the banner displayed on your first visit to this website.

Recipients and processors

Personal data collected through this website is processed by Gvg Contracting Ltd and, where necessary, by service providers acting as data processors on our behalf. These include our hosting provider (who processes server log data) and, where consent is given, analytics providers. We do not sell personal data to third parties. We do not share personal data with commercial partners except where required by law or where you have given explicit consent.

Transfers outside the EU/EEA

The primary processing of personal data takes place within the United Kingdom and the European Economic Area. The exception is the transmission of IP addresses to Google in connection with Google Fonts, as described above. Google operates under the EU-US Data Privacy Framework and uses standard contractual clauses as a safeguard for international transfers, in accordance with the requirements of the UK GDPR. No other intentional transfers of personal data outside the UK or EEA take place through this website.

Retention periods

Server log data is retained for a maximum of 30 days. Contact form submissions and associated correspondence are retained for as long as necessary to respond to your enquiry and, where a service has been purchased, for a minimum of six years in accordance with UK tax law requirements. Cookie consent records are retained for 365 days from the date of consent. Where data is no longer required for the purpose for which it was collected and no legal retention obligation applies, it is securely deleted.

Security measures

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. These measures include the use of HTTPS encryption for all data transmitted between your browser and our website, restricted access to data held on our systems and regular review of our data handling practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take our obligations seriously and act promptly in the event of any suspected incident.

Your rights (access, rectification, erasure, restriction, portability, objection)

Under the UK GDPR, you have the right to request access to the personal data we hold about you; to request correction of inaccurate data; to request erasure of your data where it is no longer necessary for the purpose for which it was collected; to request restriction of processing in certain circumstances; to receive data you have provided to us in a structured, commonly used format (portability); and to object to processing based on legitimate interests. To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

Withdrawal of consent

Where processing is based on your consent - for example, the use of statistical or marketing cookies - you may withdraw your consent at any time by clearing your cookie preferences through your browser or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to lodge a complaint with the supervisory authority

If you believe that our processing of your personal data infringes the UK GDPR or the Data Protection Act 2018, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the United Kingdom. The ICO can be contacted at ico.org.uk, by telephone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow SK9 5AF.

Minors

This website is not directed at children under the age of 16. We do not knowingly collect personal data from persons under 16. If you believe that a child under 16 has submitted personal data to us, please contact [email protected] and we will delete the data promptly.

No automated decision-making

We do not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, in the services we offer or in applicable law. The date at the top of this page reflects when it was last revised. We encourage you to review this policy periodically. For significant changes, we will take reasonable steps to bring the update to your attention.