Privacy

Who we are.

CARTRIDGE WORKS LTD, registered in England and Wales, company number 12645410, at 35–37 Ludgate Hill, London EC4M 7JN. We are the data controller for this website.

For anything on this page, email hello@cartridge.works and a person will answer.

What you give us.

The contact form asks for your name, your email address, the kind of work you're after, a budget range and your brief. That's all it asks for, and all of it is optional in the sense that you can email us instead.

We use it for one thing: to reply to you and to talk about the work. We don't add you to a mailing list off the back of an enquiry, and we don't pass it to anyone selling anything.

The legal basis is our legitimate interest in answering people who get in touch, and in taking steps toward a contract where that's where it's heading.

We keep enquiries for 24 months from our last exchange, then delete them. If we end up working together, the project records are kept for six years after the engagement ends, because HMRC expects that of our accounts.

What the site collects on its own.

Nothing, until you say yes. If you decline the cookie banner, the only thing stored is the decline itself, in your browser, so we don't badger you on every page.

If you accept, we load Google Analytics 4 and it sets two first-party cookies. We look at which pages get opened and which country people arrive from. Advertising storage and personalisation stay switched off either way, because we don't run ads.

If your browser sends a Global Privacy Control signal, we treat that as a no and don't ask.

The full list, cookie by cookie, is on the cookies page.

Who else sees it.

Three companies, each doing one job:

• Formspree — delivers the contact form to our inbox
• Google Analytics — counts page views, only with your consent
• Google Fonts — serves two typefaces, and sees your IP to do it

One case study embeds a film from YouTube in its no-cookies mode, which doesn't track you unless you press play. Each of these is a company outside the UK, so your information may be processed abroad under the safeguards their own terms set out.

Nobody buys this data from us, because we don't sell it.

What you can make us do.

Under UK GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us holding it at all, or ask for it in a portable format. Where we're relying on your consent, you can withdraw it at any time — the link in the footer reopens the cookie choice.

Email hello@cartridge.works and we'll do it within a month, usually a good deal sooner.

If we handle it badly, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd rather you told us first and gave us the chance to fix it.

The small print that is actually small.

This site isn't aimed at children and we don't knowingly collect anything from them. We don't make automated decisions about you. We don't profile you.

If this policy changes we'll change the date below. If it changes in a way that matters, we'll say so on the site rather than hoping you re-read it.

Last updated 27 October 2026.