Last updated: 8 September 2026. OnSquared ("we", "us", "our") is a web design business founded by Eshmeet Singh, based in London, United Kingdom. We are the data controller for the personal data described here. For any privacy question, contact us at [email protected], on 07354 927556, or through our contact page.
What we collect
We only collect data you give us, plus a small amount of technical data your browser sends automatically.
- Enquiry and contact forms: your name, email address, phone number, and anything you write in the message, budget or service fields.
- Checkout: your name, email address, phone number, the plan you selected, and any project notes you add. Card details are entered directly into Stripe's secure fields — we never see or store your full card number.
- Payment records: after a payment, Stripe gives us a record of the transaction (amount, plan, date, and reference IDs) so we can manage your order and subscription.
- Technical data: your IP address, browser type and the time of your request. Our hosting and security tools log this to keep the site online and to stop spam and abuse (for example, limiting how often a form can be submitted).
We do not use advertising or analytics cookies, tracking pixels, or profiling. The site sets no cookies for marketing.
Why we use it, and our legal basis
- To reply to your enquiry and prepare a quote — legal basis: your consent, and our legitimate interest in responding to people who contact us.
- To deliver a service you have paid for and manage your order, subscription and invoices — legal basis: performance of a contract.
- To keep the website secure and prevent abuse — legal basis: our legitimate interest in protecting the site.
- To meet our legal and accounting obligations — legal basis: legal obligation.
Who we share it with
We do not sell your data. We use a small number of trusted service providers ("processors") who handle data on our behalf:
- Stripe — payment processing.
- Supabase — the database that stores enquiries and orders.
- Cloudflare — website hosting, content delivery and security.
- Web3Forms — delivery of contact-form messages to our inbox.
- Google Fonts — the site loads fonts from Google's servers, which means Google may receive your IP address when a page loads.
Some of these providers may process data outside the UK. Where they do, they rely on safeguards such as the UK International Data Transfer Agreement or an adequacy decision.
How long we keep it
Enquiries that do not become clients are kept for up to 24 months, then deleted. Client and payment records are kept for 6 years after the work ends, to meet UK tax and accounting rules. Security logs are kept for a short period only.
Your rights
Under UK GDPR you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or send it to another provider. To use any of these rights, email [email protected]. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change this policy, we will update the date at the top of this page. Significant changes will be highlighted on the site.
Contact
OnSquared — London, United Kingdom
Email: [email protected]
Phone: 07354 927556
Or use our contact page.