Privacy Policy
Last updated 22 October 2026
Who we are
This site is run by Sophie Pilley, trading as Sophie Pilley Design, a UK-based product and design consultancy (“I”, “me”, “Sophie Pilley Design”). This policy explains what personal information I collect through sophiepilley.com, why, and what rights you have over it.
If you have any questions, email hello@sophiepilley.com.
Information I collect
Enquiry form: if you fill in the “Send a message” form, I collect your name, email address, organisation (if given) and whatever you write in the message.
Bookings: if you book a call through the site, scheduling is handled by Cal.com, and I receive your name, email and the details of the meeting you book.
Direct email: if you email me directly, I hold whatever information is in that email thread.
Hosting logs: the site is hosted on Vercel, which automatically logs standard technical information (like IP address and browser type) for security and reliability — this is not used to identify or track individual visitors for marketing purposes.
Site analytics (only if you accept cookies): I use PostHog to understand how people use the site. It records the pages you visit, what you click, how you arrived (for example, the referring site), your approximate location (country or city, worked out from your IP address), your device and browser type, and any errors the site hits. It also makes session recordings — a replay of how you moved around and clicked on the page — with anything you type into form fields hidden. PostHog gives your browser a random ID so repeat visits can be recognised; it isn’t linked to your name or email.
What I use it for
To reply to enquiries and questions sent through the form or by email.
To schedule, run and follow up on discovery calls and project work.
To keep basic records of client communication for the life of a working relationship, and as required for accounting and legal purposes afterwards.
To see which pages and services people are interested in, and to spot and fix things that are broken or confusing on the site — including automated review of session recordings to flag errors and failed bookings.
I don’t use your information for advertising, and I don’t sell or rent it to anyone.
Legal basis
I process enquiry and booking information on the basis of legitimate interest — responding to people who have proactively contacted me — and, once a project begins, on the basis of performing a contract with you.
I only collect site analytics with your consent, which you give by choosing “Accept” on the cookie banner. You can withdraw it at any time — see “Cookies” below.
Who I share it with
Cal.com, for scheduling calls.
Vercel, who host this website.
PostHog, for site analytics. Data is stored in PostHog’s EU region (Frankfurt). Analytics requests are routed through this site’s own domain before being passed on to PostHog.
I don’t share your information with any other third party unless required by law.
Cookies
This site doesn’t use advertising or marketing cookies.
On your first visit, a banner asks whether you’re happy for PostHog analytics to run. Until you choose “Accept”, nothing is captured or recorded and no analytics cookies are set. Your choice itself is saved in your browser’s local storage so the banner doesn’t keep reappearing.
If you accept, PostHog stores a cookie and an entry in your browser’s local storage (both named starting “ph_”) holding a random visitor ID and your current session. These let PostHog tell one visit from another and stitch a session recording together.
You can change your mind at any time using “Cookie settings” at the bottom of any page. Choosing “No thanks” stops analytics straight away. You can also email hello@sophiepilley.com and I’ll delete the analytics data linked to your visitor ID.
How long I keep it
Enquiries that don’t turn into a project are kept for up to 12 months, then deleted. Client records are kept for the duration of the working relationship plus any period required by UK tax law (currently 6 years).
Analytics data is kept in PostHog within the retention limits of my plan, and session recordings are deleted automatically after a limited period.
Your rights
Under UK GDPR, you can ask to see the information I hold about you, ask me to correct or delete it, or object to how it’s used. To do any of this, email hello@sophiepilley.com and I’ll get back to you within 30 days.
If you’re not happy with how I’ve handled your information, you can also complain to the UK Information Commissioner’s Office (ico.org.uk).
Changes to this policy
I may update this policy occasionally as the site or how it’s used changes. The date below shows when it was last updated.