PRIVACY POLICY

Last​ ​Updated​ ​on May 1st, 2026

This Privacy Policy explains how [STUDIO NAME] ("we," "our," or "us") collects, uses, discloses, and protects personal information when you visit or interact with our website at [WEBSITE URL] (the "Website"), or otherwise communicate with us. We are committed to protecting your privacy and handling your personal information responsibly, in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other relevant privacy legislation.

If you have any questions about this Policy or how we handle your information, please contact us at [CONTACT EMAIL].

---

1. Information We Collect

1.1 Information You Provide Directly

We may collect personal information you provide to us directly, including:

- Name
- Email address
- Phone number
- Billing and shipping address
- Payment information (processed securely via our payment provider — see Section 4)
- Any information you submit through contact forms, consultation requests, newsletter sign-ups, or correspondence with us

### 1.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain technical information about your device and browsing activity, including:

- IP address
- Browser type and version
- Device type and operating system
- Pages viewed, time spent on pages, and referral source
- Time zone and general location (derived from IP address)

We collect this information using cookies, log files, web beacons, pixels, and similar tracking technologies. See Section 6 for more detail.

### 1.3 Information from Third Parties

We may receive limited information about you from third-party platforms we use to operate our business, such as our website host, email marketing provider, payment processor, or scheduling tools, where you have interacted with us through those platforms.

---

## 2. How We Use Your Information

We use the information we collect to:

- Process and fulfil orders, bookings, or consultation requests
- Communicate with you, including responding to enquiries and providing customer support
- Send confirmations, updates, and service-related communications
- Send marketing communications where you have given consent (and which you may opt out of at any time)
- Improve our Website, products, and services through analytics
- Detect, investigate, and prevent fraud or misuse of our Website
- Comply with legal, regulatory, or tax obligations

---

## 3. Legal Basis for Processing (UK/EU GDPR)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases to process your personal information:

- **Contract** — to fulfil an order or provide a service you have requested.
- **Legitimate Interests** — for purposes such as Website improvement, security, and fraud prevention, balanced against your rights.
- **Consent** — for marketing communications and the use of non-essential cookies.
- **Legal Obligation** — to comply with applicable laws, including tax and accounting requirements.

You may withdraw consent at any time by contacting us at [CONTACT EMAIL].

---

## 4. How We Share Your Information

We do not sell your personal information. We may share your information with trusted third parties who support the operation of our business, including:

- **Website hosting platform:** [e.g., Showit / Squarespace / WordPress]
- **Payment processor:** [e.g., Stripe / PayPal / ThriveCart]
- **Email marketing platform:** [e.g., Flodesk / Mailchimp]
- **Analytics tools:** [e.g., Google Analytics]
- **Scheduling software:** [e.g., Calendly / Acuity], if applicable

These providers only access the information necessary to perform their function and are contractually obligated to protect it.

We may also disclose personal information where required to comply with a legal obligation, court order, or lawful government request.

---

## 5. International Data Transfers

Your information may be transferred to, and processed in, countries outside your country of residence, including the [COUNTRY WHERE STUDIO IS BASED]. Where this occurs, we take steps to ensure your information remains protected to an equivalent standard, including through:

- Standard Contractual Clauses approved by the UK or EU
- Adequacy decisions where applicable
- Contractual data protection commitments from our service providers

---

## 6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

- Recognise your device and browser
- Remember preferences
- Analyse Website traffic and usage patterns
- Support advertising, where applicable (e.g., Meta/Instagram advertising tools)

You can control or disable cookies through your browser settings at any time. Disabling cookies may affect the functionality of certain parts of the Website.

We do not use advertising data to build detailed individual profiles beyond what is necessary for the purposes described above.

---

## 7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, or as required to meet our legal, tax, or accounting obligations. When information is no longer required, we will securely delete or anonymise it.

---

## 8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

---

## 9. Your Rights

Depending on your location, you may have the right to:

- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Restrict or object to certain processing activities
- Request a copy of your information in a portable format
- Withdraw consent at any time
- Lodge a complaint with a relevant data protection authority (e.g., the UK Information Commissioner's Office at [ico.org.uk](https://ico.org.uk), or your local equivalent)

To exercise any of these rights, please contact us at [CONTACT EMAIL].

If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

---

## 10. Children's Privacy

Our Website is not directed at children, and we do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected information from a child, please contact us so we can delete it promptly.

---

## 11. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to review their privacy policies independently.

---

## 12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The most current version will always be posted on this page with a revised "Last Updated" date. Continued use of the Website following any changes constitutes acceptance of the updated Policy.

---

## 13. Governing Law

This Policy is governed by the laws of [JURISDICTION, e.g., England and Wales]. Any disputes arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of [JURISDICTION].

---

## 14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**[STUDIO NAME]**
Email: [CONTACT EMAIL]
Address: [STUDIO ADDRESS]
Website: [WEBSITE URL]

---

*This document is a general template intended as a starting point and does not constitute legal advice. Studios should review applicable local privacy laws and consider a legal review before publishing this Policy on a live website.*