Privacy Policy
Last updated: 8 August 2026
This website is operated by With Garnet Ltd, a company registered in England & Wales (company number 17265252), registered office 22 Freemans View, Haverfordwest, SA61 1LG. In this policy, “we”, “us” and “our” refer to With Garnet Ltd.
We are the data controller for the personal data described below. For any question about this policy or your data, write to [email protected] or telephone +44 7828 778 805.
1. Who we are and how to contact us
With Garnet Ltd is a game and software development studio based in Haverfordwest, Pembrokeshire. This website is an information and enquiry site: it does not take payments, does not create user accounts, and does not host a shop.
- Data controller: With Garnet Ltd, 22 Freemans View, Haverfordwest, SA61 1LG
- Company number: 17265252, registered in England & Wales
- Email for data queries: [email protected]
- Telephone: +44 7828 778 805
We have not appointed a Data Protection Officer; we are not required to under UK GDPR. Data queries are handled by the studio director.
2. What personal data we collect
| Source | Data |
|---|---|
| Enquiry form on this website | Your name, email address, company or project name (optional), the services you tick, and the content of your message. |
| Email or telephone contact | Your name, email address, telephone number, and anything you choose to tell us. |
| Web server logs (our hosting provider) | IP address, browser and device type, pages requested, date and time. Kept for security and troubleshooting. |
| Content delivery networks | Your IP address is necessarily visible to Google Fonts and Cloudflare when your browser requests the fonts and animation library used on this site. No cookies are set by them. |
| Your cookie choice | A single entry in your browser’s local storage recording whether you accepted or declined non-essential cookies. |
We do not collect special category data, we do not knowingly collect data from children, and we do not carry out automated decision-making or profiling.
3. Why we process it, and our lawful basis
| Purpose | Lawful basis (Article 6 UK GDPR) |
|---|---|
| Replying to your enquiry, preparing a quote or scoping a build review | Legitimate interests (Art. 6(1)(f)) — responding to someone who has asked us to get in touch. You can object at any time. |
| Negotiating and performing a development contract | Contract (Art. 6(1)(b)) — steps taken at your request before and during a contract. |
| Issuing invoices and keeping accounting records | Legal obligation (Art. 6(1)(c)) — UK tax and company law. |
| Keeping this website secure and available | Legitimate interests (Art. 6(1)(f)) — protecting our systems and yours. |
| Any future analytics or marketing cookies | Consent (Art. 6(1)(a)) — none currently run; if any are added they will only load after you accept. |
4. How long we keep it
- Enquiries that do not become projects: 24 months from your last message, then deleted.
- Client project correspondence: for the life of the project and 6 years afterwards, to cover contractual and warranty questions.
- Invoices and accounting records: 7 years from the end of the relevant accounting period, as UK tax law requires.
- Server logs: typically 30–90 days, per our hosting provider’s retention settings.
- Cookie choice: stored in your browser until you clear it; you can remove it at any time in your browser settings.
5. Who we share it with
We do not sell your personal data, and we do not share it for anyone else’s marketing. We use a small number of service providers who process data on our behalf:
- Our web hosting provider — stores and serves this website and its server logs.
- Our email provider — carries and stores correspondence sent to and from [email protected].
- Google Fonts (Google Ireland Ltd / Google LLC) — serves the typefaces used on this site; receives your IP address as part of the request.
- Cloudflare (cdnjs) — serves the GSAP animation library used on this site; receives your IP address as part of the request.
- Our accountant — receives invoice and payment records for statutory accounts.
We may also disclose data where we are legally required to — for example in response to a lawful request from a public authority — or to establish or defend legal claims.
6. International transfers
Our hosting, email and accounting providers store data in the United Kingdom or the European Economic Area. Google and Cloudflare are US-headquartered and may process the IP address associated with a font or script request outside the UK. Where that happens, the transfer is covered by the UK’s adequacy regulations for the EU/EEA, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework, as applicable to that provider.
7. Cookies and local storage
This website sets no advertising or analytics cookies. It stores one item in your browser’s local storage (withgarnet_cookies) to remember whether you accepted or declined non-essential cookies, so the banner does not reappear on every page. Declining blocks all non-essential storage. Full detail, including how to withdraw consent, is in our Cookie Policy.
8. Your rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct data that is wrong or incomplete.
- Erasure — ask us to delete data where we no longer have a good reason to keep it.
- Restriction — ask us to pause processing while a dispute about accuracy or legitimacy is resolved.
- Portability — receive data you gave us in a structured, machine-readable format where processing is by consent or contract.
- Objection — object to processing based on our legitimate interests, including any direct marketing.
9. Withdrawing consent
Where we rely on consent, you can withdraw it at any time and it costs you nothing. To withdraw cookie consent, clear this site’s data in your browser and choose “Decline” when the banner returns, or follow the steps in the Cookie Policy. Withdrawing consent does not affect processing carried out before you withdrew it.
10. How to exercise your rights
Email [email protected] with “Data request” in the subject line, or write to the registered office above. We will respond within one month of receiving your request, as UK GDPR requires. If a request is unusually complex we may extend that by up to two further months and will tell you why within the first month. We may ask for proof of identity before releasing personal data.
11. Complaining to the ICO
If you are unhappy with how we have handled your data, please tell us first — most things are quicker to fix directly. You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
www.ico.org.uk
12. Security
This site is served over HTTPS. Enquiry data reaches us as email, held in accounts protected by two-factor authentication. Access to client project data is limited to the people working on that project. No system is perfect: if a breach ever affects your rights and freedoms, we will notify the ICO within 72 hours and tell you directly where the law requires it.
13. Changes to this policy
If we change how we handle personal data we will update this page and the “last updated” date at the top. Material changes affecting existing clients will be sent by email.