What we do with your details.

Who we are

Treetop Agency, based in Moray, Scotland, working UK-wide. For anything on this page, email [email protected]. We are the data controller for the information described below.

What we collect

Only what you give us. The forms on this site ask for your name, your email address, and your message. Some ask for a phone number and a business name. Nothing is required beyond that, and there are no hidden fields.

We don’t track you. There is no analytics tag, no advertising pixel and no session tracking on this site. The enquiry form is delivered by the platform we run our work on, and it sets cookies of its own — it needs them to tie your answers to your submission. If we ever add analytics, this page will say so before it goes live.

Our host keeps standard server logs, which include your IP address, for security and abuse prevention. We don’t read them page by page.

Why we’re allowed to hold it

You asked us a question and we have a legitimate interest in answering it. If you become a client, we hold your details to perform the contract. We don’t send marketing email unless you ask for it.

Who else sees it

As few people as possible, and no advertiser ever. Enquiries pass through:

• The platform we run our work on — the enquiry forms are embedded from it, so what you type goes into it directly. Its servers are in the United States, under standard contractual clauses. It’s also where your account lives if you become a client.
• Our email provider — where the notification lands and stays until deleted.
• Our hosting — serves these pages and keeps the server logs above.
• Google Fonts — typefaces load from Google’s servers, which means Google sees your IP address when the page opens. We’re moving these fonts onto our own server to remove that.

If you’re a client

The customer list you give us stays yours. You decide what’s on it and what we do with it; we act on your instructions and nothing else. We don’t use it for our own marketing, we don’t share it with other clients, and we delete our copy when the work ends. That’s in the written agreement, not just here.

How long we keep it

Enquiries that don’t become work: 24 months, then deleted. Client records: for the length of the contract plus 12 months, or longer where tax rules require it. Ask us to delete something sooner and we will, unless we’re legally required to keep it.

Your rights

Under UK GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to us holding it, or ask for it in a portable format. Email us and we’ll do it within one month, usually the same week. There’s no charge.

If we handle it badly, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d rather you told us first, but it’s your call.

Changes to this page

If what we do changes, this page changes with it and the date at the top moves. We don’t backdate.