Written against UK GDPR and EU GDPR wording. The sections that most often need changing are the lawful bases, the retention periods, and the transfer mechanism, which depends on where your business is actually established rather than where your clients are.
Last updated
Who is responsible for your data
Hire AI Designer is the data controller for information collected through this site and through client engagements. Where a designer processes your material during a project, they act on our documented instructions and under a written agreement, which makes them a processor rather than an independent controller. Contact details for data questions are at the end of this page.
What we collect from you directly
When you contact us we collect your name, email address, company, and whatever you choose to tell us about the project. If you become a client we additionally collect billing details, purchase order references and the names of people on your team who will work with the designer. When you apply as a designer we collect your portfolio, work history, rate expectations, tax status and payment details.
What we collect automatically
At present, only what your hosting provider records in standard server logs: IP address, browser string, referring page and the URL requested. No analytics package, advertising pixel, cross-site tracker or fingerprinting script runs on this site. If we add analytics we will name the provider on this page and in our cookie policy before it goes live. We do not sell or rent data to anyone under any circumstances.
Project material you send us
Briefs, brand assets, product photography, research documents and anything else you share for a project are treated as confidential client material rather than as personal data, although they sometimes contain both. This material is shared only with the designers assigned to your engagement and, where relevant, the art director reviewing the work. It is never used to train any model.
Generative tools and your material
Some project work involves third-party generative tools. Which tools will be used, and whether your material is retained or processed locally, is disclosed to you in writing before an engagement starts. Where you require it, we can restrict a project to tools with enterprise data terms that exclude training use, or to locally hosted models where nothing leaves infrastructure you control.
Our legal grounds for processing
We rely on performance of a contract for everything necessary to run an engagement, including matching, delivery and invoicing. We rely on legitimate interests for site analytics, security logging and responding to enquiries, having balanced those interests against your rights. We rely on legal obligation for tax and accounting records. Where consent applies, such as marketing email, you can withdraw it at any time.
Who else sees your information
Designers assigned to your project, under written confidentiality terms. Our payment processor, for invoicing and settlement. Our email and analytics providers, under data processing agreements. Our accountants, for statutory records. We disclose information to authorities only where legally compelled, and we will tell you if that happens unless we are prohibited from doing so.
International transfers
We place designers across the United States, United Kingdom, United Arab Emirates, Australia and Canada, so your material may be accessed outside your own country. Transfers out of the UK or EEA are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with a transfer risk assessment. If your engagement requires data to remain in a single jurisdiction, tell us before the work starts and we will staff accordingly.
How long we keep things
Enquiries that do not become engagements are deleted after twelve months. Project material is deleted twelve months after an engagement closes unless you ask us to retain it for continuity. Invoices and tax records are kept for seven years because we are legally required to. Designer applications that are unsuccessful are deleted after six months.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to processing based on legitimate interests, ask us to restrict processing while a dispute is resolved, or request your data in a portable format. We respond within thirty days. If you are in the UK or EEA you may also complain to your supervisory authority, and in the UK that is the Information Commissioner's Office.
Cookies and local storage
This site sets no cookies and writes nothing to your browser's storage, which is why you were not asked to consent to anything. Typefaces are requested from Google Fonts, which reveals your IP address to Google without setting a cookie; self-hosted fonts are available on request. Our cookie policy covers this in full and will be updated before anything is added.
Security and breaches
Access to client material is limited to the people working on your engagement and is revoked when an engagement ends. Accounts require multi-factor authentication. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within seventy-two hours and tell affected clients directly and promptly.
Children
This is a business service and is not directed at anyone under sixteen. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us and we will delete it.
Changes and contact
We update this page when our practices change and record the date at the top. Material changes affecting existing clients are communicated by email rather than by quiet edit. For any privacy question, correction or deletion request, write to contact@hire-ai-designer.com and we will acknowledge within two business days.
- No data sales, advertising pixels or cross-site tracking
- Project material never used to train any model
- Access, correction and deletion honoured within 30 days
- Project files deleted 12 months after an engagement closes