Legal

Privacy Policy

We keep this simple and plain English. Here's exactly what information we collect, why we collect it, and how we handle it.

Last updated: March 2026

Who we are

Studio is a web design and development agency. Our website is studio-agency.com. For any privacy-related queries, you can reach us at info@studio-agency.com.

We are the data controller for any personal information collected through this website. We take our responsibilities under applicable data protection law — including the UK GDPR and EU GDPR — seriously.

What we collect

We only collect personal information that you voluntarily provide to us. The sole mechanism through which we collect data on this site is our contact form.

When you submit the contact form, we collect:

  • NameSo we know who we're talking to.
  • Email addressSo we can respond to your enquiry.
  • Company or business nameOptional. Helps us understand your context.
  • Service interestWhich type of project you're enquiring about.
  • MessageThe details of your enquiry.

We do not collect any other personal data — no analytics, no tracking pixels, no behavioural profiling.

How we use it

We use the information you submit through our contact form solely to respond to your enquiry and discuss a potential project with you.

We will never:

  • Sell your personal data to third parties
  • Add you to a marketing list without your explicit consent
  • Use your information for any purpose beyond responding to your message
  • Share your data with any party not listed in this policy

Our lawful basis for processing your data is legitimate interests: you have contacted us to discuss a service, and we have a legitimate interest in responding to that enquiry.

Third-party processors

To operate our contact form, we use two third-party services. Both are reputable providers operating under GDPR-compliant data processing agreements.

ResendEmail delivery

When you submit the contact form, your details are transmitted to Resend's API and delivered to our inbox as an email. Resend acts as a data processor on our behalf. Your data is not stored on Resend's servers beyond the time required to deliver the email.

Cloudflare TurnstileBot protection

We use Cloudflare Turnstile to verify that form submissions come from real people, not automated bots. Turnstile performs this check without tracking or profiling you. Cloudflare may process your IP address and browser signals for this purpose. See Cloudflare's privacy policy for full details.

No other third parties receive your personal data.

Data retention

We do not store form submissions in a database. When you submit the contact form, your information is delivered directly to our email inbox via Resend and is not persisted anywhere else on our systems.

Emails in our inbox are retained for as long as necessary to manage our client relationships and business correspondence — typically up to three years, after which they are deleted or anonymised.

If you would like your information deleted earlier, please contact us at info@studio-agency.com and we will action this promptly.

Your rights

Under UK and EU GDPR, you have the following rights in relation to your personal data:

  • Right to accessRequest a copy of the personal data we hold about you.
  • Right to rectificationAsk us to correct inaccurate or incomplete data.
  • Right to erasureRequest that we delete your personal data.
  • Right to restrict processingAsk us to limit how we use your data.
  • Right to objectObject to our processing of your data on the basis of legitimate interests.
  • Right to data portabilityReceive your data in a machine-readable format.

To exercise any of these rights, email us at info@studio-agency.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly. Visit ico.org.uk for more information.

Cookies

This website does not use cookies for analytics, advertising, or tracking purposes.

Cloudflare Turnstile, our bot-protection service, may set a short-lived cookie or use browser storage as part of its challenge mechanism. This is strictly functional — used only to verify you are human — and does not track you across sites or sessions.

No cookie consent banner is required for strictly functional cookies under current UK guidance.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of the page. We encourage you to review this page periodically if you have ongoing contact with us.

Material changes — those that significantly affect your rights or how we use your data — will be communicated directly to anyone we are actively working with.

Contact us

If you have any questions about this privacy policy or how we handle your data, please get in touch: