Privacy Policy
Who we are
Composition Limited ("Composition", "we", "us") is a design agency and product studio that builds websites and apps for clients and under our own name. Our registered office is 71–75 Shelton Street, London WC2H 9JQ. For privacy enquiries, contact hello@composition.agency.
Scope
This policy covers personal data we handle through this website, our communications with clients and prospective clients, and the apps and products we publish.
The apps we make fall into one of two categories:
Apps that don't collect data. Some of our apps are designed so that no personal data ever leaves your device. We don't run servers that receive your data, we can't see what you store, and we have nothing to hand over if asked. Where this applies, the app itself will say so plainly.
Apps and sites that do collect data. Other products may collect personal data in order to function — for example, account details, support messages, or usage analytics. Where that's the case, the product will have its own notice explaining what's collected and why. This document sets out the principles we apply across all of them.
What we may collect
Depending on the product or service, this can include:
Contact details you give us (name, email, company) when you get in touch or hire us
Project information clients share with us during engagements
Usage data (e.g. pages visited, device type) where a product uses analytics
Account information where a product requires you to sign up
We don't collect special category data unless you actively send it to us, and we'd prefer you didn't.
How we use it
To respond to enquiries and carry out work we've been hired to do
To run, improve, and secure our products
To send service-related messages (we don't send marketing unless you've opted in)
To meet legal and accounting obligations
Legal basis (UK GDPR)
Contract — delivering agency work and services you've signed up for
Legitimate interests — running our business, responding to enquiries, keeping our products secure
Consent — optional things like marketing emails or non-essential cookies, which you can withdraw at any time
Legal obligation — tax, accounting, and similar requirements
Sharing
We don't sell your data. We share it only with service providers who help us operate (e.g. email, hosting, payment processors) under contract, or with authorities where we're legally required to.
Retention
We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. Client records are typically held for seven years to meet UK accounting requirements.
Your rights
Under UK GDPR you can ask us to access, correct, delete, restrict, object to, or port the personal data we hold about you. Email hello@composition.agency to make a request. If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office at .
Cookies
Our website uses essential cookies to function, and analytics cookies only if you consent. You can change your choice at any time via the cookie banner.
Children
Our services aren't directed at children under 13, and we don't knowingly collect their data.
Last updated: 1 May 2026