Privacy policy

1. Data controller

The data controller for GigKiln is FTJ Designs, registered with the UK Information Commissioner's Office under registration number ZC127003. You can verify this on the ICO public register at ico.org.uk/ESDWebPages/Search.

GigKiln is operated by FTJ Designs (a UK sole trader trading as GigKiln), based in England. For the purposes of UK GDPR and the Data Protection Act 2018, FTJ Designs is the data controller for personal data collected through this website.

Data protection contact: create@ftjdesigns.co.uk.

2. What data we collect

• Email address — when you unlock a tool, subscribe to updates, or send us a submission.
• Submission content — anything you type into our worker submissions form (story, feedback, press enquiry, correction).
• Cookie consent choice — stored in a first-party cookie called gk_cookie_consent.
• Anonymous analytics — page views and referrer via Plausible Analytics, only if you consent. Plausible does not use cookies that identify you and does not collect personal data.
• Server logs — IP address and user agent at the moment of submitting a form, for abuse prevention. Stored for 30 days, then deleted.

3. Lawful basis

• Consent (UK GDPR Article 6(1)(a)) — for analytics cookies, newsletter sign-up, and tool-access email storage.
• Legitimate interest (Article 6(1)(f)) — for limited server logs to prevent abuse, and for processing worker submissions you actively send us.

4. How long we keep data

• Tool-access emails: kept until you unsubscribe (one-click link in every email).
• Worker submissions: 3 years from receipt, then permanently deleted.
• Server logs: 30 days.
• Cookie consent: 12 months, then we ask again.

5. Third parties we share data with

• Supabase (database and auth, EU-region hosting) — stores submissions and tool-access emails.
• Plausible Analytics (EU-hosted) — anonymous page-view counts only, with consent.
• Lovable (build and deploy platform) — does not receive personal data from form submissions.
• Email provider — only when sending you transactional or unsubscribe-confirmation emails.

We do not sell your data. We do not share it for advertising purposes. There are no advertising or cross-site tracking cookies on GigKiln.

6. International transfers

We host data in the UK or EU wherever possible. Any onward transfer outside the UK/EU is covered by UK International Data Transfer Agreements or equivalent safeguards.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected (rectification).
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, including via the unsubscribe link in every email.

To exercise any of these rights, email create@ftjdesigns.co.uk. We respond within one calendar month.

8. Complaints

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or call 0303 123 1113.

9. Related policies

See our cookie policy, terms of use and disclaimer.