Privacy Policy

Most of what we hold is information you provide yourself. Sending a project request or a message gives us your name, email address and telephone number, along with the details you choose to share about your company, brand and the work you need.

• Enquiry details — name, email, phone, company or brand, timeline and budget range.
• Project brief — the description of what you want to make and any goals you share.
• Messages — anything you send us through the contact form or by reply.

You provide this information voluntarily when you contact us. We ask you not to send confidential or sensitive material through the forms before an engagement and a suitable agreement are in place.

This site runs on the Shopify platform, which records basic technical data when a page loads: the pages viewed, approximate location from network address, referring page, browser and device type, and the time of the visit.

This keeps the site working and shows, in general terms, which pages are used. It is not used to identify you individually. What is stored in your browser, and how to control it, is set out in the Cookie Policy.

Each piece of information serves at least one clear purpose.

• To respond to an enquiry. We need your details to reply and to prepare a proposal.
• To deliver a project. Running an engagement requires contact details and the brief.
• To keep our records. Project and correspondence records are kept so we can support the work and resolve any query.
• To meet accounting duties. Where a project is invoiced, financial records must be retained.
• To keep the site secure. Technical logs help identify faults and abuse.

We do not build advertising profiles and do not add you to a marketing list without a clear opt-in you can withdraw at any time.

Running the studio requires a few service providers. Each receives only what it needs, and none may use your information for its own purposes.

• Website platform. Shopify hosts the site and processes form submissions.
• Email provider. Replies, proposals and correspondence are sent through a commercial email service.
• File and collaboration tools. Where a project needs shared files, they are handled through professional design and storage tools.
• Accounting software. Invoices and financial records are maintained there.

Some providers store data on servers outside your state or country. Where information moves internationally, we rely on the safeguards the provider commits to under its own data protection terms.

Project records, including the brief and correspondence, are kept for three years after a project ends so we can support the work and answer later queries. Enquiries that do not become projects are kept for twelve months.

Where a project was invoiced, the financial record is kept for six years to meet accounting requirements. You can ask us to delete correspondence sooner, and we will, except where a record must be kept for that accounting duty.

Whatever your location, we apply the following as a matter of practice.

• Access. Ask what we hold about you and receive a copy.
• Correction. Ask us to fix information that is wrong.
• Deletion. Ask us to erase information we no longer need to keep.
• Objection. Ask us to stop a particular use of your information.
• Withdraw consent. Unsubscribe from any optional messages at any time.

Requests are answered within thirty days. We may need to confirm your identity first, and we may keep material where a legal or accounting duty requires it, in which case we tell you and explain why.

The site runs over an encrypted connection, and access to project records is limited to those delivering the work. Studio accounts are protected by strong credentials and, where supported, multi-factor authentication.

No system is completely secure and we do not claim otherwise. Please do not send passwords or payment details by email or through the forms.

This studio provides professional services to businesses and adults and is not directed at children. We do not knowingly collect information from anyone under sixteen. If you believe a child has contacted us, tell us and we will delete the information promptly.

This policy is reviewed whenever our practices change and at least once a year. The date at the top of the page records when the current version took effect and replaces earlier versions in full.

Where a change materially affects how we handle information about an active client, we contact that client directly rather than relying on the published page alone.