1. What we collect.
When you enquire or work with us. Your name, business name, email address, phone number, website address and budget range, plus whatever you tell us about your project, any files you send us, and the billing details we need to raise an invoice.


2. When you browse the site.
Your IP address, browser and device type, the pages you visit, and the site or search that referred you.


3. When we build or maintain your website.
Access to accounts such as your website platform, hosting, domain registrar or email. We use it only for the work you have asked for. Where those systems hold personal data belonging to your own customers, we handle it on your instructions alone and you remain in control of it. We recommend changing any shared credentials once the work ends.


4. Payments.
We never see your card details. Stripe processes Website Care subscriptions and stores the recurring payment mandate, which ends when you cancel. PayPal or bank transfer covers project fees. We keep only the payment record our accounts require.


5. Why we use it, and our lawful basis

• To answer enquiries, prepare quotes and deliver projects and Care plans — because we have a contract with you, or are taking steps to enter one at your request.

• To invoice, keep accounts and meet tax obligations — because the law requires it.

• To run, secure, improve and promote the business and the website — our legitimate interests, where these do not override your rights.

• To send marketing emails and set non-essential cookies — only with your consent, which you can withdraw at any time.

We collect only what we need. We do not use your data for automated decision-making or profiling.


6. Who we share it with.
Wix, which hosts our website and processes form submissions. Stripe, for Care subscriptions. PayPal or our bank, for project fees. Our accountant. Our email provider. Analytics providers, where you have consented. And any hosting, domain or print supplier a project happens to need, with your knowledge.

We disclose data to authorities only where the law requires it. We never sell your data, and we never pass it to anyone for their own marketing.

 
7. Where your data goes.
Some providers — Wix and Stripe in particular — operate internationally and may process data outside the UK. Where that happens we rely on UK adequacy regulations, or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.


8. How long we keep it.

• Enquiries that do not become projects: 12 months

• Client records, invoices and correspondence: 6 years, which covers HMRC record-keeping requirements for self-employed people

• Project working files: normally 12 months after completion

• Marketing contacts: until you unsubscribe or ask us to delete you

​After that we delete or anonymise the data.


9. Cookies.
Essential cookies keep the website working and cannot be switched off. Analytics cookies help us understand how the site is used, and are set only where you have consented. You can change or withdraw that consent at any time through the cookie settings on our website.
 
You can also block cookies through your browser settings, though some parts of the site may then not work properly.


10. Your rights.
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to you in a portable format. You can object to processing based on legitimate interests, opt out of marketing at any time, and withdraw any consent you have given.
 
Email hello@uddinstudio.com and we will respond within one month. We may ask you to confirm your identity first.
 
You also have the right to complain to the Information Commissioner's Office at ico.org.uk.


11. Security.
We use appropriate technical and organisational measures to protect your data, including restricted access to accounts and reliance on reputable providers. No online system is completely secure, but if a breach occurs that puts your rights at risk we will notify the ICO and, where required, you.


12. A few other things.
Our website links to other sites. Their privacy practices are their own, so please read their policies.

Our services are aimed at businesses. We do not knowingly collect data from anyone under 13.

We may update this policy. The current version always sits on this page, with the date shown at the top.


Uddin Studio · hello@uddinstudio.com · Birmingham, United Kingdom