Skip to main content

Policy

Privacy

Last updated: 3 February 2026

‍

1. Introduction

Welcome to Naked Ideas (“we,” “our,” or “us”). We are a design agency providing creative and digital services. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your information when you visit nakedideas.com or engage with us.

By using our website, you agree to this Privacy Policy.

‍

2. Information We Collect

a. Information You Provide

When you contact us, subscribe to our newsletter, or work with us, we may collect:

  • Name
  • Email address
  • Company name
  • Telephone number
  • Project details, briefs, and communications
  • Marketing preferences
  • Any other information you choose to provide

b. Automatically Collected Information

When you visit our website, we may collect:

  • IP address
  • Browser and device information
  • Pages visited, interactions, and referral sources
  • Any other information relating to your visit

‍

3. How We Use Your Information

We use your information to:

  • Respond to enquiries and communicate with you
  • Manage leads, clients, and projects
  • Provide and deliver design and creative services
  • Prepare proposals, contracts, and invoices
  • Improve our website and user experience
  • Send newsletters and marketing communications (only if you have opted in)
  • Prevent spam, abuse, and fraudulent activity
  • Comply with legal and contractual obligations

‍

4. Cookies, Analytics & Third-Party Tools

We use cookies, similar technologies, and trusted third-party services to operate, secure, and improve our website and communications.

Google Tag Manager

We use Google Tag Manager, a tag management system provided by Google LLC, to manage and deploy website tags and scripts. Google Tag Manager itself does not collect personal data, but tags deployed through it (e.g. Google Analytics 4, Hotjar) may do so.

Google Analytics 4 (GA4)

We use Google Analytics 4 (GA4), the latest version of Google’s web analytics platform, to understand how visitors interact with our website. GA4 collects data such as:

  • Pages visited and time spent on pages
  • Device and browser type
  • Geographic location (approximate)
  • User interactions and events

GA4 uses cookies and identifiers to analyse user behaviour across sessions and devices. This helps us improve website performance, content, and user experience.

You can opt out of GA4 tracking by adjusting your browser settings or using the Google Analytics Opt-out Browser Add-on.

Hotjar

We use Hotjar, a behaviour analytics service provided by Hotjar Ltd., to analyse user experience through heatmaps, session recordings, and feedback tools. Personal data and form inputs are masked or excluded.

You may opt out of Hotjar tracking using Hotjar’s opt-out mechanism.

HubSpot (Contact Forms & CRM)

We use HubSpot, a CRM and marketing platform provided by HubSpot, Inc., to power contact forms and manage enquiries and client communications.

When you submit a form, the information you provide is processed by HubSpot to respond to your enquiry and manage client relationships.

Google Workspace (Email & File Management)

We use Google Workspace, provided by Google LLC, for business email communications, file storage, document management, and internal collaboration.

Personal information shared with us via email or during a project may be stored and processed within Google Workspace systems.

Mailchimp (Email Marketing)

We use Mailchimp, an email marketing platform provided by The Rocket Science Group LLC, to send newsletters and marketing emails to users who have opted in. You may unsubscribe at any time via the link in our emails.

Google reCAPTCHA

We use Google reCAPTCHA, a security service provided by Google LLC, to protect our website and contact forms from spam, abuse, and automated submissions.

reCAPTCHA analyses information such as IP address, device and browser characteristics, and user interactions. This data is processed directly by Google in accordance with its privacy policies.

Vimeo (Embedded Videos)

We use Vimeo, a video hosting and streaming service provided by Vimeo, Inc., to embed videos on our website (showreels, case studies, or background videos).

When you view a page containing a Vimeo video, Vimeo may collect information such as:

  • IP address
  • Device and browser information
  • Pages visited and interactions with the video

This data is collected directly by Vimeo and processed in accordance with Vimeo’s privacy policies. We do not receive personally identifiable information from Vimeo unless you choose to interact with Vimeo’s services directly.

‍

5. Sharing Your Information

We do not sell your personal information.

We may share information with:

  • Trusted service providers (analytics, CRM, email marketing, video hosting, security, and productivity tools)
  • Contractors or collaborators involved in delivering client projects
  • Legal or regulatory authorities when required by law

All third parties are required to process personal data in accordance with applicable privacy laws.

‍

6. Client Work & Confidentiality

Information shared with us as part of a client engagement is treated as confidential and used only to deliver agreed-upon services, unless otherwise required by law or agreed in writing.

Work that we have already carried out for our clients may be used for our own marketing purposes.

‍

7. Data Security

We implement reasonable technical and organisational safeguards to protect personal information. However, no system or transmission method is completely secure.

‍

8. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Request correction or deletion
  • Withdraw consent
  • Object to or restrict certain processing

To exercise these rights, contact us via our contact form.

‍

9. Third-Party Links

Our website may contain links to third-party websites or embedded content. We are not responsible for their privacy practices or content.

‍

10. Children’s Privacy

Our website and services are not intended for children under the age of 13, and we do not knowingly collect personal data from children.

‍

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised date.

‍

12. Contact Us

If you have questions about this Privacy Policy, contact us via our contact form.

‍

_

‍

Candidates

‍

1. What Information We Collect

We may collect and process the following types of personal data about candidates:

  • Name, address, email address, and telephone number
  • CVs, portfolios, cover letters, and work samples
  • Employment history, education, and qualifications
  • Skills, experience, and suitability for the role
  • Interview notes and assessment results
  • References and right-to-work information (where applicable)
  • Any other information you choose to provide during the recruitment process

We do not intentionally collect special category data unless required by law or voluntarily provided (for example, reasonable adjustments for interviews).

‍

2. How We Collect Your Information

We collect candidate information through:

  • Direct applications submitted via our website or email
  • Recruitment agencies or job platforms
  • Interviews, assessments, and correspondence during recruitment

‍

3. How We Use Candidate Information

We use candidate personal data to:

  • Assess suitability for current and future roles
  • Communicate with candidates during the recruitment process
  • Arrange interviews and evaluations
  • Make hiring decisions
  • Comply with legal and regulatory obligations

‍

4. Legal Basis for Processing

Under UK GDPR, we process candidate data on the following lawful bases:

  • Legitimate interests – to manage our recruitment process and make hiring decisions
  • Legal obligation – to verify right to work and comply with employment law
  • Consent – where required (for example, retaining CVs for future opportunities)

‍

5. Who We Share Candidate Data With

We may share candidate data with:

  • Recruitment agencies acting on our behalf
  • Interviewers and relevant internal team members
  • Service providers used for recruitment administration (e.g. email, document storage)
  • Legal or regulatory authorities, where required by law

We do not sell candidate personal data.

‍

6. Data Storage & Security

Candidate information may be stored securely using our internal systems, including Google Workspace (email and document storage).

We take appropriate technical and organisational measures to protect candidate data from unauthorised access, loss, or misuse.

‍

7. Data Retention

If your application is unsuccessful, we will normally retain your personal data for 12 months after the recruitment process ends, unless you ask us to delete it sooner or consent to longer retention for future opportunities.

If you are offered and accept employment, relevant data will be transferred to your personnel file.

‍

8. Your Rights as a Candidate

You have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to processing
  • Withdraw consent (where processing is based on consent)

To exercise these rights, please contact us via our contact form.

‍

9. Changes to This Notice

We may update this Candidate Privacy Notice from time to time. Any changes will be posted with an updated revision date.

‍

10. Contact Us

If you have any questions about this Candidate Privacy Notice or how we handle candidate data, contact us via our contact form.

‍

Back to home