Privacy and cookie policy

Last updated: October 2026

This policy explains how VRCraftworks Ltd ("VRCraftworks", "we", "us") uses personal information collected through www.vrcraftworks.com, and the choices you have. We're a small VR and AR studio based in Brighton, UK.

Who we are

VRCraftworks Ltd is the data controller for the personal information described here.

If you have a question about this policy or your information, email info@vrcraftworks.com.

What we collect and why

When you contact us

If you use our contact form, email or phone us, we collect what you give us: your name, email address, phone number (optional), company website, what you need help with and your message.

We use it to reply to you, discuss your project and, if you become a client, to deliver the work. Our lawful basis is our legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract.

We don't add you to a mailing list or send marketing emails unless you've asked us to.

When you visit the website

Like most websites, ours collects some information automatically, such as the pages you visit, how you arrived, your browser and device type, your approximate location (from your IP address) and the time of your visit. We use these tools:

  • Squarespace hosts our website and contact form. It uses essential cookies to keep the site secure and working, and analytics cookies to tell us how the site is used.
  • Google Analytics 4 (Google) helps us understand how visitors use the site, so we can improve it. We use it only if you accept analytics cookies.
  • Google Ads (Google) measures whether our adverts lead to enquiries, for example when someone submits the contact form after clicking an advert. We use it only if you accept marketing cookies.
  • Lead Forensics identifies the organisation a visit comes from, using the visitor's IP address and public business data, so we can understand which businesses are interested in our services. It's designed to identify companies, not individuals. We use it only if you accept marketing cookies.
  • YouTube and Google Drive host some of the videos on our site. When you play an embedded video, Google may set its own cookies.

Our lawful basis for analytics and marketing cookies is your consent, which you give or refuse through our cookie banner. Essential cookies don't need consent because the site can't work without them.

Cookies

Cookies are small files stored on your device. We use three kinds:

Essential: keeps the site and forms working and secure, and remembers your cookie choice. Examples: Squarespace security and session cookies. Needs your consent: no.

Analytics: tells us how visitors use the site. Examples: Squarespace Analytics, Google Analytics (_ga, _ga_*). Needs your consent: yes.

Marketing: measures adverts and identifies visiting organisations. Examples: Google Ads (_gcl_*), Lead Forensics. Needs your consent: yes.

You can change your choice at any time using the cookie settings link at the bottom of every page, or by clearing cookies in your browser. Blocking all cookies in your browser may stop parts of the site from working.

Who we share it with

We don't sell your information. We share it only with the service providers that run our website and email, who process it on our behalf under contract:

  • Squarespace (website hosting and forms)
  • Google (Google Workspace email, Google Analytics, Google Ads, YouTube)
  • Lead Forensics (business visitor identification)

Your enquiry is seen only by VRCraftworks; we don't pass enquiries to associates or anyone else. We'll also share information if the law requires us to. If you become a client, we may share project details (not your enquiry) with specialist associates working on your project, under confidentiality.

International transfers

Some of these providers, including Squarespace and Google, are based in or process data in the United States. Where that happens, the transfer is protected by the UK Extension to the EU–US Data Privacy Framework or by the UK's approved contract clauses.

How long we keep it

  • Enquiries that don't go further: up to 2 years after our last contact, then deleted.
  • Client records: for as long as we work together and then up to 6 years, for accounting and legal reasons.
  • Google Analytics data: up to 14 months, then deleted automatically.
  • Cookies: see your browser settings; most of ours expire within 2 years.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct it or delete it;
  • object to, or ask us to restrict, how we use it;
  • ask for it in a portable format;
  • withdraw your consent at any time (for cookies, through the cookie settings link).

To use any of these rights, email info@vrcraftworks.com. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.