Privacy
Policy

1. Who We Are

Studio Kaiso is a UK-based creative and digital studio. We are the data controller for any personal information you provide to us when using our website or engaging our services.

If you have any questions about how we handle your data, contact us at hello@studiokaiso.co.uk.

2. What Data We Collect

We may collect the following personal data:

• Contact information — your name, email address, and any details you include in our contact form or email correspondence.
• Project information — details about your business, project requirements, and goals that you share with us during the course of our work together.
• Usage data — basic analytics about how visitors use our website (e.g. pages visited, browser type, approximate location). This data is aggregated and not tied to individuals.

We do not collect sensitive personal data (such as health, financial, or biometric data) and we do not knowingly collect data from anyone under the age of 16.

3. How We Collect Data

We collect personal data when you:

• Submit an enquiry via our contact form.
• Email us directly at hello@studiokaiso.co.uk.
• Engage our services as a client.
• Visit our website (via cookies and analytics — see Section 7).

4. Why We Use Your Data

We use your data for the following purposes:

• To respond to your enquiry — when you contact us, we use your details to get back to you and discuss your project.
• To deliver our services — when you become a client, we use your information to manage your project, communicate, and deliver agreed work.
• To improve our website — aggregated analytics help us understand how the site is being used so we can make it better.
• To meet legal obligations — we may need to retain certain records for tax, accounting, or legal compliance purposes.

We do not use your data for automated decision-making or profiling. We do not send marketing emails unless you have explicitly opted in.

5. Our Legal Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

• Legitimate interests — to respond to enquiries and manage client relationships.
• Contractual necessity — to deliver services you have engaged us to provide.
• Legal obligation — to comply with our legal and regulatory requirements.
• Consent — where we have asked for and received your explicit consent (e.g. for optional communications).

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share data with trusted third parties only where necessary to deliver our services, including:

• Project management and communication tools (e.g. email clients, file sharing platforms).
• Website analytics providers (anonymised data only).
• Legal or financial advisers where required by law.

Any third parties we use are required to handle your data securely and in line with applicable data protection law.

7. Cookies

Our website uses a small number of cookies to understand how visitors use the site. These are analytics cookies only — they do not track you across other websites and do not identify you personally.

You can control or disable cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use the website.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary:

• Enquiries that do not lead to a project are kept for up to 12 months.
• Client project data is retained for up to 6 years for legal and accounting purposes, in line with HMRC requirements.
• You can request deletion of your data at any time (see Section 9).

9. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (subject to legal retention requirements).
• Restriction — request that we limit how we use your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at hello@studiokaiso.co.uk. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. All client files and communications are handled securely.

While we take care to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we will notify you promptly if a breach occurs that affects your data.

11. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any personal data.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised date. We encourage you to check back periodically.

13. Contact

For any questions, requests, or concerns about this privacy policy or how we handle your data, please contact us at hello@studiokaiso.co.uk.