Your information, handled with care.

Who we are

Nelia Rose Designs (“we”, “us”) is the data controller for the personal information described in this notice. You can reach us at hello@neliarosedesigns.com for anything to do with your data, including a request to see it or delete it.

What we collect, and why

We only collect what we need to review applications and run projects. Specifically:

• Application form — your name, email address, business name and website, your answers about your business and goals, your readiness and investment range, and (optionally) the name of the founder who referred you. We use this to review your application and prepare for your Discovery Call. Our lawful basis is legitimate interest in assessing an enquiry, and taking steps at your request before entering a contract.
• Newsletter and quiz sign-ups — your email address, and for the quiz, which experience was recommended to you. We use this to send the welcome offer or result you asked for. Our lawful basis is your consent, which you can withdraw at any time.
• Seeing our pricing — if you enter your email to view our prices, we store that address so we know who has asked. We do not send you anything as a result of this on its own. Our lawful basis is legitimate interest in understanding who is considering working with us.
• Reviews — your name, business, email, rating and words. We publish a review publicly only if you tick the box that says we may. Our lawful basis is consent.
• Client portal — if you become a client, the messages, files, tasks, invoices and questionnaire answers you exchange with us through the portal. Our lawful basis is performing our contract with you.
• Booking a call — your name, email and chosen time, handled by our scheduling provider. If you ask us for a call at a date our calendar does not yet cover, we also keep what you told us about when suits you and what you would like to discuss, so we can arrange it.
• Booking deposits — if we ask for a deposit to hold your call slot, we keep your name and email, the amount, and a reference to the payment, so the deposit can be credited against your project later. The payment itself is handled by Stripe; your card details never reach us.
• One-off Bloom purchases — when you buy a smaller design service, we keep your name and email, the service and price, the brief and links you submit, and a reference to the Stripe payment. We use this to take payment, fulfil your order and contact you about the work. Our lawful basis is taking steps at your request and performing our contract with you. Stripe handles the payment; your card details never reach us.

Who else sees it

We do not sell your information and we do not share it for advertising. It is handled by a small number of service providers who process it on our behalf:

• Supabase — our database and file storage.
• Vercel — website and portal hosting.
• Google Workspace (Gmail) — the mailbox our emails are sent from and received into.
• n8n — the automation service that sends our email sequences.
• Cal.com — Discovery Call scheduling.
• Stripe — payments. Card details are handled entirely by Stripe and never reach us.
• Anthropic — powers the AI assistants we use. This covers Cheri, the assistant inside the client portal; the briefs we prepare before Discovery Calls; and an internal assistant that helps us keep track of our own client work. Where an assistant answers a question about your project, the relevant details from your record are sent to Anthropic to generate that reply. Nothing sent is used to train their models, and our internal assistant can only read information — it cannot change your record, your invoices or your project.

How long we keep it

Applications and client records are kept for as long as we are working together and for up to six years afterwards, which is how long we may need them for tax and accounting purposes. Unsuccessful or withdrawn applications are kept for up to twelve months so we can recognise you if you apply again, then deleted.

One-off order and payment records are kept for up to six years for fulfilment, support, tax and accounting purposes. Information in a brief is used only to deliver and support the service you purchased.

Conversations with Cheri, the assistant in your client portal, are kept for twelve months and then deleted automatically. They are private to you — you can delete any conversation yourself at any time, and nobody else can read them.

We take a weekly backup of our database, which is stored securely and kept for a rolling ninety days. Portal conversations are excluded from those backups. If you ask us to delete your information, it is removed from our live systems straight away and disappears from backups within ninety days.

Your rights

Under UK data protection law you can ask us for a copy of your information, ask us to correct it, ask us to delete it, ask us to restrict how we use it, and object to us using it. Where you gave consent, you can withdraw it at any time — every marketing email includes a way to opt out, and you can always reply asking to be removed.

Email hello@neliarosedesigns.com and we will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

This website does not use advertising or tracking cookies. The client portal uses a strictly necessary cookie to keep you signed in, and the site remembers in your browser whether you have dismissed the welcome offer so it does not reappear.