1. Who is the data controller

CherryOnTop Studio is operated by Iveta Chadimova, sole trader based in Kent, United Kingdom.

For all data protection matters, you can contact:

Email: yvette@cherryontop.io

2. What personal data I collect

2.1 Data you provide directly

Through contact forms or direct communication, I may collect:

• Name
• Email address
• Message content
• Any additional information you choose to share

2.2 Automatically collected data

When you browse my websites, standard technical data may be collected:

• IP address
• Browser type and version
• Device type
• Pages visited
• Time spent on pages
• Referrer information

If analytics tools are enabled (e.g., Google Analytics), anonymised usage data may also be collected.

2.3 Cookies

My websites may use essential cookies for functionality. If analytics or embedded media require non‑essential cookies, you will see a cookie banner and can choose whether to accept them.

3. How I use your data

I process your personal data only for legitimate business purposes:

• To respond to your enquiry
• To provide services you request
• To maintain and improve my websites
• To protect my websites from spam and abuse
• To comply with legal obligations

4. Legal basis for processing

Under UK GDPR, I rely on the following lawful bases:

• Legitimate interest — responding to enquiries, maintaining site security
• Consent — when you choose to accept non‑essential cookies
• Contract — when you engage my services
• Legal obligation — when record‑keeping is required by law

5. How your data is stored

Your enquiry messages are stored securely in my email inbox (Hostinger email service). Technical logs are stored on my hosting server.

6. How long I keep your data

I retain enquiry emails for up to 24 months, unless:

• you request deletion sooner; or
• we enter a working relationship

7. Who I share your data with

I do not sell, trade, or share your personal data with third parties.

Your data may be processed by:

• My hosting provider (Hostinger)
• Email service provider (Hostinger email)
• Security tools (e.g., reCAPTCHA)

8. International transfers

Some technical services may process data outside the UK/EU using GDPR‑compliant safeguards.

9. Your rights under UK GDPR

You have the right to:

• Access your personal data
• Request correction
• Request deletion
• Object to processing
• Withdraw consent
• Request data portability

10. Security

I use industry‑standard security measures to protect your data.

11. Children’s privacy

My websites and services are not intended for children under 16.

12. Links to external sites

I am not responsible for the privacy practices of external websites.

13. Changes to this policy

I may update this Privacy Policy from time to time.

14. Contact

Email: yvette@cherryontop.io
Location: Kent, United Kingdom