Privacy policy

Last updated: 28 October 2026

This policy explains what personal data Rubies collects when you use this website or get in touch, why we collect it and what your rights are under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Rubies is a trading name of Rubies Group Limited, a company registered in Scotland (company number SC819993), which is the data controller for the information described here. Registered office: Westwood Business Centre, 69–71 Aberdalgie Road, Glasgow, G34 9HJ.

For anything about your data, email hello@rubiesdigital.co.uk.

What we collect

• When you contact us through the form, by email or by booking a call: your name, email address, business name (if you give it) and whatever you write in your message.
• When you become a client: the contact, billing and project details we need to deliver the work and invoice you.
• When you visit the site: our hosting provider's servers automatically log technical details such as your IP address, browser type and the pages requested. We use these only to keep the site running and secure.

Why we use it and our lawful basis

• To reply to your enquiry and prepare a quote, because you asked us to (steps before entering into a contract).
• To deliver work you have bought from us and to invoice you (performance of a contract).
• To keep business and tax records (legal obligation).
• To keep the website secure and working (our legitimate interests).

We do not sell your data, and we will not add you to a mailing list unless you ask us to.

Who we share it with

We use a small number of trusted services to run the business. They process data only on our instructions:

• Formspree, which receives contact-form messages and forwards them to us.
• Our booking tool, if you book a call online.
• Railway, which hosts this website.
• Google Fonts, which serves the fonts on this site. Your browser connects to Google to load them, which shares your IP address with Google.
• Our email provider and accounting software, for client and billing records.

Some of these providers are based in, or store data in, the United States. Where data leaves the UK, we rely on the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK–US data bridge.

How long we keep it

• Enquiries that don't lead to work: up to 12 months, then deleted.
• Client and billing records: 6 years after the end of the financial year they relate to, as HMRC requires.
• Server logs: kept by our hosting provider for a short period, in line with its own policy.

Cookies

This website does not set any cookies and does not use analytics or advertising trackers. If that changes, we will update this policy and ask for your consent before setting any non-essential cookies.

Your rights

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to have it transferred to you or another organisation. To make a request, email us using the address above. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put it right first.