BESPOKE BY R&L

Privacy policy

Last updated: 07 September 2026

Who is responsible for your information

Bespoke by R&L is responsible for personal information processed through this website. Contact us at lexieshaw@hotmail.co.uk.

About this notice This notice explains information handled through this website. The site provides project information and, when enabled, an enquiry form. It does not accept online orders or payments. ## Browsing and hosting records When you visit, our hosting systems process connection information such as your IP address, request time, requested page, response status and technical connection details. This is used to deliver and protect the website, investigate faults and produce aggregate traffic totals. Our basis for this processing is legitimate interests in operating a reliable, secure website and understanding its use. ## Your project brief When the download-only project-brief tool is available, it works in your browser. Your answers are used to create a text file when you choose to save it. The tool does not transmit those answers to us or store them in our website database. You control the downloaded file and how long you keep it. If you later share it with us through another channel, that is a separate communication. ## Website administration Authorised administrators have a username, a securely hashed password and temporary sign-in records. Password-reset requests generate a single-use link valid for 30 minutes. Microsoft 365 delivers these emails through the website provider’s sender. We process these to manage access and protect website content, on the basis of our legitimate interests in securing the service. Uploaded photographs and published page text are website content; administrators should only upload information they are authorised to publish. ## Who handles information Generative Solutions provides website hosting and technical maintenance. Authorised staff and technical providers may access the records needed to operate, secure and support the site. We do not sell visitor information or use advertising pixels. Hosting access records may be used to calculate aggregate page-view and visitor counts without placing tracking cookies on your device. ## How long information is kept The hosting access log is rotated daily with seven rotated files retained, alongside the current log. Security and error logs are limited by file size and replaced as those limits are reached. Administrator sessions expire after eight hours; expired session records are removed on subsequent sign-ins. Sign-in throttle records are removed after ten minutes when further sign-in attempts are processed. Administrator account details are kept while access is required. Site content and media are kept while needed for the website; previous media may be retained for recovery. Backup copies follow the hosting provider’s recovery schedule. ## Email delivery and processing locations Microsoft provides administrator password-reset email delivery and may process service data internationally under its data-protection terms. For information about the hosting and recovery arrangements used for your information, contact us at the privacy address above. ## Your choices and rights Depending on the circumstances, you can ask to access or correct your personal information, request erasure or restriction, and object to processing based on legitimate interests. Data portability applies in the circumstances set out in data protection law. Contact the privacy email shown above so we can consider your request. You may also complain to the Information Commissioner’s Office. We do not use automated decisions with legal or similarly significant effects. ## Cookies and changes See our cookie policy for the essential administrator cookie. We will update this notice before introducing new forms, marketing, payments or tracking that change how personal information is handled.

Website enquiries

When you submit the enquiry form, we receive your name, email address, any optional phone/site details and project description. We use them to respond to your request and discuss a possible project, including taking steps at your request before entering a contract. Enquiries are saved in the website inbox and a notification is sent to our configured receiving address through Microsoft 365. Website inbox records are kept for up to 365 days and removed when the inbox is opened or a new enquiry is received. Email and recovery copies have separate retention arrangements. If an enquiry becomes a project, records needed for that project are handled separately. The form does not enrol you in marketing.

For information about your rights or to raise a concern, visit the Information Commissioner’s Office.