the small print, kept small

Privacy notice

Last updated 8 October 2026

This notice explains what happens to the details you send us through this website, and what the site does in your browser.

Who we are

Paper Pilot is a web design studio based in Cyprus, working for businesses in the UK and Cyprus. The person who decides how your details are used (in data protection terms, the controller) is Joshua Sheppard. For anything about your details, email hello@paperpilot.co.uk.

What the contact form collects

When you send the form, we receive your name, your email address, the boxes you ticked under “What do you need?”, your message, the address of the page you sent it from, and the time. To filter out spam, the form also tells us how long it was open and includes a hidden field that people never see or fill.

Why we use it

Only to reply to you and, if you would like a website from us, to prepare a proposal. We do not add you to a mailing list, and we do not sell your details or share them for marketing.

Our legal basis

Replying to you and preparing a proposal are steps you ask us to take before a possible contract (Article 6(1)(b) of the GDPR, and of the UK GDPR for people in the UK). If your message is not about working with us, we rely on our legitimate interest in answering messages people send us (Article 6(1)(f)).

Who handles it

Cloudflare, Inc. hosts this website and passes your message to us by email. To deliver the site and protect it from attacks, Cloudflare also processes technical details of each visit, such as your IP address. Our email provider then receives the message and keeps it in our inbox. No one else receives it. Cloudflare runs a worldwide network, so your details may pass through servers outside the UK and the EU; Cloudflare's privacy policy explains how it handles them.

If the form fails to send, the site writes a short error note to Cloudflare's logs so we can fix the problem. The note leaves out your name, email address and message, and Cloudflare deletes it within 7 days.

How long we keep it

We keep your enquiry while we are talking to you about it. If it does not lead to a project, we delete it 12 months after our last contact.

Your rights

You can ask us for a copy of your details, ask us to correct or delete them, or object to how we use them. You can also ask for them in a format you can take to someone else (portability). If we ever ask for your consent to something, you can withdraw it at any time. To do any of this, email hello@paperpilot.co.uk. We will answer within one month.

Complaints

If you are unhappy with how we handle your details, please tell us first at hello@paperpilot.co.uk. You can also complain to a data protection authority: in Cyprus, the Commissioner for Personal Data Protection (dataprotection.gov.cy); for people in the UK, the Information Commissioner's Office (ico.org.uk).

Cookies and your browser

This site sets no cookies of its own, and it has no analytics, advertising or tracking code. Cloudflare, which hosts the site, may set strictly necessary security cookies, for example to tell people from bots.

On the home page and the case study pages, your browser's session storage keeps your place on the page, so a reload brings you back to it. It stays on your device and is cleared when you close the tab.

Changes

If we change this notice, we will change the date at the top.