Skip to content
Charter 77

Legal

Privacy Policy

Last updated: 30 June 2026

This policy explains how Charter 77 collects and uses your personal data. We are committed to protecting your privacy and handling your data responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Charter 77 is a strategic design studio and the data controller for information collected through this website. You can contact us at c77.design@gmail.com.

2. What data we collect

We collect the following types of personal data:

  • Contact form submissions — your name, email address, company name (optional), and message content when you use our contact form.
  • Purchase data — when you buy a digital product, your name, email address, and payment details are collected by Paddle (our payment processor). We receive a notification of your purchase but do not store your payment card details.
  • Usage data — aggregated analytics data about how visitors use our website, collected via Vercel Analytics. This is collected without cookies, is not tied to any individual visitor, and is automatically discarded after 24 hours.

3. How we use your data

  • To respond to enquiries submitted via the contact form
  • To fulfil and confirm digital product purchases
  • To send transactional emails relating to your order
  • To improve our website based on aggregated, non-identifying usage data

We do not use your data for marketing without your explicit consent, and we do not sell your data to third parties.

4. Legal basis for processing

  • Contract — processing your purchase and delivering your product
  • Legitimate interests — responding to enquiries and improving our service. We have assessed that this processing is proportionate and does not override your rights and interests; you can request more detail on this assessment at any time.
  • Legal obligation — retaining transaction records as required by UK tax law

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.

5. Third parties

We use the following third-party services, each of which processes personal data on our behalf and maintains its own privacy policy:

  • Paddle — payment processing and digital product delivery (paddle.com)
  • Sanity — content management for our website (sanity.io)
  • Vercel — website hosting and aggregated, cookie-free analytics (vercel.com)
  • Resend — transactional email delivery (resend.com)

International data transfers

Some of these providers may process or store data outside the UK and European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses (as extended to the UK), or a recognised adequacy decision. You can request further information about the specific safeguards in place by contacting us at c77.design@gmail.com.

6. Data retention

  • Contact form enquiries are retained for up to 2 years.
  • Transaction records are retained for 7 years in accordance with UK tax law.
  • Analytics data is not stored beyond 24 hours and is not linked to identifiable individuals.

7. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including relying on reputable third-party processors who maintain their own security and compliance standards. No method of transmission or storage is completely secure, but we take reasonable steps appropriate to the nature of the data we hold.

8. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (where legally permitted)
  • Object to processing or request restriction of processing
  • Request that your data be provided to you or transferred to another organisation, where technically feasible
  • Lodge a complaint with the Information Commissioner’s Office (ico.org.uk)

To exercise any of these rights, contact us at c77.design@gmail.com. We will respond within one month, as required by UK GDPR.

9. Cookies

This website does not use tracking or advertising cookies. Vercel Analytics operates without cookies and does not track individual users.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision.

11. Contact

If you have any questions about how we handle your data, please contact us at c77.design@gmail.com.