Who we are
Creative Mushroom is a web design business run by Aaron Coward, a sole trader based in Cornwall. In this policy “we” and “us” means Creative Mushroom. We are the data controller for the personal information described here.
Contact: hello@creativemushroom.co.uk
The short version
We only collect what you give us, we only use it to reply to you and do the work you asked for, we never sell it, and we never add you to a mailing list. This website has no advertising or analytics tracking.
What we collect and why
When you send us a message through our contact form. We collect your name and email address, plus anything else you choose to give us, such as your business name, phone number, current website and details of your project. We use these to reply to you and, if you go ahead, to provide our services. Our lawful basis is our legitimate interest in answering enquiries, or taking steps at your request before entering into a contract.
When you ask for a free Website Health Check. We collect your name, your email address, your website address, and your business name and type if you give them. We use these to run the check on your website, send you the report, and follow up once about the results, as the form explains. Our lawful basis is our legitimate interest in providing the report you asked for. The check only looks at your website from the outside, the way any visitor or search engine would. We never log in to your website or see anything private.
When you email or phone us. We keep the correspondence so we can help you and keep a record of what was agreed.
If you become a client. We hold the contact, billing and project details needed to deliver our services and meet our legal and tax obligations. Our lawful bases are performing our contract with you and complying with the law.
Who we share it with
We never sell your information or pass it to anyone for their own marketing. We use a small number of trusted services to run the business, and they only handle your information on our instructions:
- SiteGround, who host this website. Messages sent through our website forms are stored on our website at SiteGround, on servers in the UK and Europe.
- HubSpot (HubSpot, Inc., based in the USA), our customer records system. When you send an enquiry or ask for a Health Check, your name, email address, business name, website and message are added to it so we can keep track of our conversations with you. Our HubSpot account is hosted in the EU, and any access from the USA is protected by the UK Extension to the EU-US Data Privacy Framework or by standard contractual clauses approved for UK transfers.
- Google (Google Workspace), who provide our email. Emails you send us, and the notifications our website forms send to us, are held in our Google mailbox. Where this involves transfers outside the UK, Google protects them with the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.
- GitHub, Inc. (part of Microsoft, based in the USA), whose servers run our Website Health Check. When you ask for a check, your name, email address, website address and business name are passed to GitHub so the check can run and the report can be emailed to us. Where your information goes to the USA, it is protected by the UK Extension to the EU-US Data Privacy Framework or by standard contractual clauses approved for UK transfers.
- Google PageSpeed Insights, which measures the speed of the website being checked. Only the website address is sent, never your personal details.
- The official domain registries, when you use the domain name checker on our website. Only the domain name you type is checked with them. We do not send any personal details.
We may also share information if the law requires it.
How long we keep it
- Health Check requests that do not lead to further contact: 12 months, then deleted.
- Enquiries that do not lead to work: 12 months, then deleted.
- Client records: for as long as we work together, then 6 years after our last invoice, as required for tax purposes.
Cookies and fonts
This website does not use advertising or analytics cookies. Our hosting may set strictly necessary cookies that keep the site secure and working, which do not need your consent. Our website fonts are loaded from Google Fonts, which means your browser connects to Google and shares your IP address with it so the fonts can be delivered.
Your rights
You have the right to ask for a copy of the information we hold about you, and to ask us to correct it, delete it, or stop or limit how we use it. You can also object to us using it on the basis of legitimate interests. Just email hello@creativemushroom.co.uk and we will reply within one month. There is no charge.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this page if the way we use your information changes. Last updated: 12 October 2026.