Privacy Policy

Last updated: 14 October 2026

This policy explains what personal data Panthera Designs Ltd collects when you visit pantheradesigns.com or work with us, why we collect it, who we share it with, and the choices you have. We have written it to be read, not skimmed past.

1. Who we are

Panthera Designs Ltd is the data controller for the personal data described in this policy. We are a company registered in England and Wales (company number 14482362), with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

For any privacy question or request, email enquire@pantheradesigns.com.

2. What this policy covers

This policy covers our website (pantheradesigns.com and its subdomains), enquiries you send us, the services we provide to clients, and our business outreach. It does not cover other websites we link to, including social media. Those sites have their own policies.

3. The data we collect

Information you give us. When you enquire, book a call, become a client, use our client portal or design review tools, or pay an invoice, we collect what you provide. This typically includes your name, job title, company, email address, phone number, business address, project details, feedback on our work, and billing details.

Information collected automatically. When you visit our website, we collect technical and usage information such as your IP address, approximate location, browser and device type, the pages you view, and how you arrive at and move through the site. Analytics and marketing tools only run in line with your cookie choices (see section 6).

Visitor identification. With your consent where required, our website uses a visitor identification service that can tell us which company a visitor works for and, for visitors in the United States, may identify the individual's business profile. See section 5 for details.

Publicly available business information. We may collect business contact details (such as name, role, company and work email) from public sources, company websites and professional networks to contact relevant businesses about our services.

We do not intentionally collect special category data (such as health or religious information), and we ask that you do not send it to us.

4. How we use your data, and our legal basis

• Responding to enquiries and preparing proposals: to take steps at your request before entering a contract, or our legitimate interest in responding to business enquiries.
• Delivering projects and managing our client relationship, including invoicing: performance of our contract with you or your company.
• Running, securing and improving our website: our legitimate interest in operating a secure, working website.
• Website analytics: your consent if you are in the UK, EU or elsewhere outside the US; for US visitors, our legitimate interest, which you can opt out of at any time.
• Marketing measurement, advertising and visitor identification: your consent if you are in the UK, EU or elsewhere outside the US; for US visitors, our legitimate interest, which you can opt out of at any time.
• Contacting businesses about our services: our legitimate interest in business-to-business marketing. Every message lets you opt out, and we stop as soon as you ask.
• Accounting, tax and legal requirements: compliance with our legal obligations.

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

5. Visitor identification

We use RB2B, a visitor identification service, to understand which companies are interested in our work. When it runs, RB2B matches technical data from your visit against its own business database. For visitors outside the US this identifies the company only. For visitors in the US, it may also identify an individual business profile, such as name, job title, company, LinkedIn profile and business email.

RB2B only runs if you accept Marketing cookies (UK, EU and rest of world) or, for US visitors, unless you opt out. We use this information to understand interest in our services and, occasionally, to contact a business about relevant work. You can stop it at any time through Cookie preferences, and you can ask us to delete any record we hold about you.

6. Cookies and similar technologies

Cookies are small files stored on your device. We group them into three categories:

• Strictly necessary: needed for the site to work and to remember your cookie choice (our pc_consent cookie, kept for 6 months). These are always on.
• Analytics: Google Analytics 4 and Webflow's site analytics, which help us understand how the site is used.
• Marketing: the LinkedIn Insight Tag, which gives us anonymised audience insights and lets us measure and show LinkedIn ads, and RB2B visitor identification (section 5).

UK, EU and rest of world: analytics and marketing tools stay off until you choose to accept them in our cookie banner. You can accept all, reject all, or choose by category. Google Analytics uses Google Consent Mode: when analytics is declined, it sets no cookies and Google receives only limited signals without cookie identifiers.

United States: analytics and marketing tools run by default, and you can opt out at any time. We honour the Global Privacy Control (GPC) browser signal as an opt-out of marketing.

You can change your choice at any time in Cookie preferences. We remember your choice for 6 months, then ask again. You can also delete cookies in your browser settings. Each provider sets its own cookie durations, explained in their policies: Google, LinkedIn, RB2B.

7. Who we share your data with

We share personal data only where needed, with:

• Service providers who process data on our behalf, including Webflow (website hosting and forms), Google (analytics), LinkedIn (advertising insights), RB2B (visitor identification), Bloom (client management tools on our website), GoVisually (design review), and our email, file storage, accounting and payment providers.
• Specialist collaborators, such as development partners, when they work on your project under our direction and confidentiality terms.
• Professional advisers, such as accountants and lawyers.
• Authorities, where the law requires it or to protect our rights.
• A buyer or successor if our business, or part of it, is sold or restructured. Your data would remain protected under this policy.

8. International transfers

Some of our providers, including Google, LinkedIn, RB2B and Webflow, store or access data in the United States and other countries outside the UK. Where data leaves the UK, we rely on the UK–US Data Bridge for certified US companies, or on the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, so your data receives equivalent protection.

9. How long we keep your data

• Enquiries that do not become projects: up to 2 years from our last contact.
• Client, contract and financial records: 6 years after the end of the financial year in which the engagement ends, as required for tax purposes.
• Your cookie choice: 6 months.
• Google Analytics data: up to 14 months.
• Visitor identification records: up to 12 months.
• Business outreach contacts: removed promptly if you opt out, and otherwise reviewed at least every 12 months.

Deleted data may remain in secure backups for a short period before it is overwritten.

10. Your rights

Under UK data protection law you have the right to access your data, correct it, have it deleted, restrict or object to how we use it (including for direct marketing, which you can stop at any time), receive it in a portable format, and withdraw consent at any time. Withdrawing consent does not affect processing that happened before.

Depending on where you live, including some US states, you may have additional rights, such as opting out of targeted advertising. Use Cookie preferences or the Global Privacy Control signal, or email us.

To make a request, email enquire@pantheradesigns.com. We will respond within one month and will not charge a fee unless a request is clearly unfounded or excessive. We may need to verify your identity first.

11. Security

We use appropriate technical and organisational measures to protect your data, including access controls, secure and reputable service providers, and limiting access to people who need it. If you suspect any misuse of your data, please tell us immediately at enquire@pantheradesigns.com.

12. Children

Our website and services are intended for businesses and are not directed at children under 18. We do not knowingly collect their data.

13. Changes to this policy

We will update this policy when our practices or the law change, and revise the date at the top. If we make significant changes, we will highlight them on our website.

14. Complaints

If you have a concern, please contact us first and we will do our best to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local data protection authority.

15. Governing law

This policy is governed by the law of England and Wales.