We take your privacy seriously. This policy explains what personal information we collect when you use this website, why we collect it, what we do with it, and the rights you have under UK data protection law.
1. Data controller and business identity
Mousehold Studio is a trading name of Arrivy Ltd. For the purposes of this Privacy Policy, “Mousehold Studio”, “we”, “us” and “our” refer to Arrivy Ltd, a company registered in England and Wales under company number 16299350. Registered office: 5 Vicarage Court, Mousehold Lane, NR7 8HG, Norwich.
Contact us about privacy
- Data protection contact: hello@mouseholdstudio.com.
- You can also contact us via our website contact form.
2. What information we collect
We collect only the information we need to respond to your enquiry, provide our services, and run this website effectively.
Information you give us directly
- Contact form submissions: your name, business name, email address, phone number if you choose to provide it, and the content of your message.
- Email correspondence: any information you include when you email us or reply to our messages.
- Phone calls: if you call us, we may note your name, contact details and the nature of your enquiry.
- Project enquiries: details about your business, your current website or digital setup, and what you want to achieve.
Information collected automatically
- Technical data: your IP address, browser type and version, device type, operating system, and screen resolution.
- Usage data, where you have consented to non-essential measurement or marketing cookies: the pages you visit, how long you spend on them, how you arrived at our site, and what you click on.
- Location data, where available from technical or consented measurement data: an approximate location based on your IP address, city or region level, not your exact address.
3. Cookies
We keep cookies and similar technologies to a minimum. We may store a strictly necessary consent preference in your browser so the site remembers whether you accepted or rejected non-essential analytics and Google Ads cookies. This preference is stored for up to six months.
We load Google Tag Manager container GTM-K85F7L93 and the Google Ads tag with the ID AW-18212734474 on each page with region-specific Google consent mode defaults. For visitors in the European Economic Area, the UK and Switzerland, Google Ads consent is denied by default until you accept optional measurement. For visitors outside those regions, Google Ads measurement may be allowed by default unless you reject it or change your cookie settings.
We also use Google Analytics 4 (measurement ID G-G5Q22G6N8K) to understand how visitors use this website, for example which pages are viewed, how long visitors spend on them, how they arrived, and the general journey through the site. Google Analytics uses the same consent choice as our advertising cookies and the same region-specific defaults: for visitors in the European Economic Area, the UK and Switzerland it stays in denied consent mode until you accept, meaning no analytics cookies are set and only aggregated, cookieless signals are collected. If you accept, Google Analytics may set first-party analytics cookies (such as _ga) to recognise returning visits, and may process your approximate location derived from IP address, device and browser information, and the pages you view. We do not use Google Analytics to identify you personally, and we do not send contact form message contents to Google Analytics.
If you consent to marketing measurement, Google may set or read advertising cookies such as first-party Google conversion cookies, receive the page URL and title, referrer, browser and device information, approximate location derived from IP address, and ad-click identifiers such as GCLID where present.
We also use a Google Ads phone conversion snippet for the displayed number 01603 324064. Where Google Ads call conversion tracking applies, Google may replace that displayed number with a Google forwarding number so calls from website visitors who arrived through Google Ads can be attributed to the campaign.
We use this Google Ads data to measure advert performance, attribute enquiries and phone calls to ad clicks, improve campaign reporting, and support remarketing or similar advertising audiences. We do not send contact form message contents to Google through this tag.
You can accept, reject, or change this choice using the cookie banner or the Cookie settings link in the footer. If you reject or withdraw consent, the Google Ads tag is updated to denied consent mode and the site attempts to remove known first-party Google advertising cookies from this domain.
4. How we use your information
We use your personal information for the following purposes and on the following legal bases:
Responding to enquiries (legitimate interest)
- Answering questions you send through our contact form, by email or over the phone.
- Providing quotes, proposals and information about our services that you have asked for.
- Following up on enquiries where we reasonably believe you would expect to hear from us.
Providing our services (contract)
- If you become a client, we process your information to deliver the services you have engaged us for, including web design, SEO, Google Ads, website care or custom software.
- This includes communicating with you about your project, managing your account, sending invoices, and providing support.
Improving our website (legitimate interest)
- Identifying technical issues or broken pages.
- Making the site faster and easier to use.
Advertising measurement and remarketing (consent)
- Measuring whether Google Ads campaigns lead to website visits and enquiries.
- Attributing ad clicks to later actions on this website.
- Creating or using Google Ads audience signals only where you have granted the relevant consent.
- Respecting your withdrawal of consent by updating Google consent signals back to denied and removing known first-party Google advertising cookies where possible.
Legal obligations
- Keeping records for tax and accounting purposes.
- Complying with any legal or regulatory requirement that applies to us.
5. How we store and protect your information
We take reasonable technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, disclosure or alteration.
Storage
- Contact form submissions and email correspondence are stored in our email and project management systems.
- Client project data is stored in secure development, hosting and backup environments.
- We use trusted third-party providers for hosting, email, analytics and business operations.
Security
- We use strong passwords, multi-factor authentication where available, and access controls to limit who can view personal data.
- We keep software, plugins and systems up to date with security patches.
- We train anyone working with us on data protection responsibilities.
- No website or online system can be guaranteed completely secure. We will tell you promptly if we become aware of a data breach that affects your personal information.
6. Who we share your information with
We do not sell your personal information or trade it. We share personal data only where needed to run this website, respond to enquiries, provide services, meet legal duties, or where you have consented to a specific use such as Google Ads measurement.
Trusted third-party services
We use a small number of trusted third-party services to run our business and this website. These may process personal data on our behalf. They include:
- Hosting providers, to keep our website and client projects online.
- Email providers, to send and receive email.
- Google Ads, Google Tag Manager, and the Google tag, to measure advertising performance and support remarketing or audience features. Where consent is required, this is only after consent has been given; elsewhere it applies unless you reject or change your settings.
- Google Analytics 4, to understand how our website is used. Where consent is required, analytics cookies are only set after consent has been given; otherwise Google Analytics runs in a limited, cookieless consent mode.
- Project management and development tools, to manage client work.
- Payment processors and accounting software, to invoice clients and keep financial records.
Other circumstances
- If we are required to disclose information by law, regulation or court order.
- If we sell or transfer part or all of our business, your data may transfer with it, but only for the purposes you originally provided it for.
- With your explicit consent, where required.
7. How long we keep your information
We do not keep personal information forever. Our retention periods are:
- Enquiry and contact form data: up to two years after our last correspondence, unless you become a client.
- Client project data: for the duration of the project and up to six years after it ends, for legal, accounting and warranty purposes.
- Financial and invoicing records: for the period required by UK tax law, typically six years.
- Website analytics and advertising measurement data: for up to 26 months where platform retention controls allow. Google Ads cookies set through our Google tag configuration are limited to up to 90 days and are not refreshed on every page load by our code.
- Backups: retained as part of our operational backup cycle, typically on a rolling basis, and deleted in accordance with our backup retention schedule.
8. International data transfers
Most of the third-party services we use are based in the UK or the European Economic Area. Some tools may process data outside the UK, for example in the United States. Where this happens, we choose providers who offer appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision recognised under UK GDPR, and we limit what data is shared.
AI website assistant
Our website includes an AI chat assistant that answers questions about our services. When you send a message in the chat, the text of your message and basic technical data (such as your IP address and the time of the request) are processed so the assistant can reply.
Who processes your messages
Your messages are sent through our server and then to our AI provider, DeepSeek, which operates the language model that generates the replies. DeepSeek processes and stores this data on servers located in the People's Republic of China.
International transfer
China is not covered by a UK adequacy decision. We rely on the UK International Data Transfer Agreement (IDTA) together with a transfer risk assessment as the safeguard for this transfer. You can request more information using the contact details on this page.
Lawful basis
We process chat messages on the basis of our legitimate interests in answering website enquiries efficiently. You can object to this processing at any time.
Please do not share sensitive information
The assistant is for general questions only. Please do not enter sensitive personal information (such as health, financial or identity details) into the chat. To share details with us securely, please use our contact form or instant quote form.
The assistant is automated
Replies are generated by AI and may occasionally be inaccurate or incomplete. They are not professional advice. For anything important, please contact us directly.
Retention
We do not store the content of chat conversations on our systems.
Your rights and complaints
You have the right to access, correct or erase your personal data and to object to processing. To exercise these rights contact us at hello@mouseholdstudio.com. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
10. AI-assisted work
We may use AI-assisted tools, code assistants, research tools and productivity software to help us provide our services more efficiently. We will not knowingly submit your confidential business information, customer personal data, or sensitive information into public AI tools unless you have approved this or appropriate safeguards are in place. AI-assisted outputs are always reviewed by a human before they are used.
11. Your rights under UK GDPR
Under UK data protection law, you have the following rights in relation to the personal information we hold about you:
Your rights
- Right to be informed: you have the right to know what we do with your personal data (which is what this policy is for).
- Right of access: you can ask us for a copy of the personal data we hold about you.
- Right to rectification: you can ask us to correct any inaccurate or incomplete personal data.
- Right to erasure: you can ask us to delete your personal data in certain circumstances.
- Right to restrict processing: you can ask us to limit how we use your data in certain circumstances.
- Right to data portability: you can ask us to provide your data in a structured, commonly used format.
- Right to object: you can object to us processing your data where we rely on legitimate interest as the legal basis.
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time.
Exercising your rights
To exercise any of these rights, email hello@mouseholdstudio.com or contact us via our website contact form. We will respond within one calendar month. There is no charge for making a request, unless it is manifestly unfounded or excessive. We may ask you to confirm your identity before proceeding.
Making a complaint
If you are unhappy with how we have handled your personal data, please tell us first so we can try to put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. Their website is at ico.org.uk.
12. Links to other websites
Our website may link to third-party websites, tools or platforms. We do not control those sites and are not responsible for their content, privacy practices or security. Please check the privacy policy of any site you visit.
13. Children's privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
14. Changes to this privacy policy
We review this policy regularly and update it when our practices, services or legal obligations change. The latest version will always be available on this page. If we make significant changes, we will make this clear on our website.
15. Last updated
This privacy policy was last updated on 1 July 2026.