Privacy & Cookie Policy

Last updated: 13 May 2026

This page explains how rev0 handles personal data on the sales-pitch pages we send to prospective clients. These pages are hosted on Squarespace and shared by direct link only — they are not indexed or linked from the main rev0 site. If you arrived here, someone at rev0 sent you the link or you contacted us about it.

1. Who we are

rev0 is a UK-based design and AI consultancy. For the purposes of UK GDPR and the Data Protection Act 2018, rev0 is the data controller for the personal data described in this policy.

2. What these pitch pages contain

Each pitch page is a short presentation comparing visualisations already published on a company's own website with alternative versions produced by rev0 using AI image-generation tools. The purpose is to illustrate what rev0 could deliver if the company chose to work with us.

To put a pitch page together we use:

  • The company's website URL and publicly accessible images from it

  • The company name and, where relevant, the name of the project shown

  • AI-generated images produced by rev0 in response to those reference visuals

3. What personal data we process

3a. About the company we are pitching to

Most of the source material is about a business, not an individual. However, some of it may qualify as personal data under UK GDPR — for example, if a sole trader's business is named after them, or if a source image shows identifiable people. Where that is the case, we treat it as personal data and apply this policy to it.

Specifically we may hold:

  • The company's public website URL

  • Images downloaded from that public URL

  • Business contact details for the recipient (name, role, work email) used to send the pitch

  • AI-generated images derived from the source visuals

3b. About visitors to the pitch page

If you visit a pitch page, Squarespace (our hosting provider) may collect limited technical information such as your IP address, browser type, and pages viewed. This is described in section 7 below.If you email studio@rev0.co.uk, we will hold the contents of your message and your email address for as long as needed to respond and to keep a reasonable record of the exchange.

4. Why we process it — and our lawful basis

Under UK GDPR we must have a lawful basis for processing personal data. For pitch pages, we rely on legitimate interests (Article 6(1)(f) UK GDPR): demonstrating our services to a prospective business client in a targeted, non-intrusive way.

We have assessed that:

  • The interest is legitimate — B2B portfolio demonstration is a normal commercial activity.

  • The processing is necessary — without the reference visuals, we cannot show what a like-for-like upgrade would look like.

  • It is proportionate — only publicly available material is used, the page is not indexed, and the recipient can have everything deleted on request (see section 6).If you reply to discuss working with us, we then process your data under contract or pre-contract steps (Article 6(1)(b)).

5. How long we keep your data

Data Retention

  • Source URL, source images, AI-generated images for a pitch - Up to 90 days after the pitch is sent, unless the recipient engages further

  • Email correspondence - Up to 24 months, then deleted

  • Pitch page itself (live on Squarespace) - Taken down within 90 days of sending if there is no replyIf you ask us to delete your data sooner, we will (see below).

6. Your rights — including deletion

Want everything removed?
Email studio@rev0.co.uk and we will, within 30 days:

  • Take this pitch page offline

  • Delete the source images and AI-generated images we produced for you

  • Remove the stored company URL and any contact details we hold

  • Confirm by email once it is done

Under UK GDPR you also have the right to:

  • Be informed about how we use your data (this page)

  • Access the personal data we hold about you

  • Rectify anything that is inaccurate

  • Erase your data ("right to be forgotten")

  • Restrict our processing of it

  • Object to processing based on legitimate interests

  • Data portability where applicable

  • Complain to us or to the ICOTo exercise any of these rights, email studio@rev0.co.uk. We aim to respond within one calendar month, as required by UK GDPR.

7. Cookies

These pages are hosted on Squarespace, which sets cookies on visitors' browsers. We do not add any further tracking, advertising, or analytics tools to the pitch pages.

Strictly necessary cookies (always set)

Squarespace sets a small number of cookies that are required for the site to function — for example, to keep the page secure and to remember your cookie banner choice. These do not require consent under UK PECR.

Analytics cookies (consent-based)

Where enabled, Squarespace Analytics may set cookies to count visits and measure basic page performance. These are loaded only after you accept via the cookie banner on the page. You can withdraw consent at any time by clearing your browser cookies for this domain.

Third-party content

Pitch pages do not embed third-party advertising trackers, social media pixels, or video players. If that ever changes, this section will be updated and a fresh consent request will be shown.For full detail on the cookies Squarespace uses across all sites it hosts, see Squarespace's Cookie Policy.

8. Who else sees your data

We use a small number of trusted third-party processors:

  • Squarespace — website hosting and analytics

  • Google Workspace / Gmail — email correspondence

  • AI image-generation providers — used to produce the alternative visuals; reference images may be processed by these providers under their own terms

We do not sell your data, and we do not share it with anyone else other than where we are legally required to do so.

9. International data transfers

Some of our processors (Squarespace, Google, AI providers) are based outside the UK, principally in the United States. Where data leaves the UK, we rely on the safeguards those providers have in place — typically the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an equivalent adequacy mechanism.

10. How we keep data secure

We use reasonable technical and organisational measures — encrypted storage, strong authentication on our accounts, and limited access — to protect the data we hold. No online service can be guaranteed 100% secure, but we will notify affected individuals and the ICO within 72 hours of becoming aware of any breach that risks your rights or freedoms.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the most recent version.

12. Complaints

If you are unhappy with how we have handled your data, please tell us first at studio@rev0.co.uk. You also have the right to complain to the UK supervisory authority: