We do not use third-party tracking pixels, advertising cookies, or social-network embeds. The site does not set any cookies of its own.
3 · Why we collect it (lawful basis)
Under the UK GDPR we rely on two lawful bases:
Legitimate interests — to reply to your enquiry, schedule the call, and run the business safely (e.g. block abuse / spam attempts)
Consent — when you explicitly send us a WhatsApp message or fill in the booking form, you're asking us to contact you back
We do not use your data for marketing without separate consent, and we do not sell or share it for advertising.
4 · How long we keep it
Booking records — kept for 12 months from the booking date, unless you become a paying client (in which case we retain records for 6 years to meet HMRC requirements for UK companies)
WhatsApp message threads — retained for 12 months unless you ask us to delete them sooner
Server / access logs — automatically deleted after 30 days
5 · Who we share it with
We only share your data with the suppliers we use to run the studio. They process data on our instructions and cannot use it for their own purposes:
Cloudflare, Inc. — hosting the website, the booking API, and the data store (Cloudflare Workers KV). UK GDPR compliant; sub-processor under our agreement.
Meta Platforms (WhatsApp) — if you contact us via WhatsApp, your message is stored on Meta's infrastructure under their terms
We do not share data with advertisers, analytics platforms (other than Cloudflare's own privacy-first analytics, which is cookieless and aggregated), or any other third party.
6 · International transfers
Our hosting provider Cloudflare may process data on infrastructure located outside the UK. Cloudflare maintains UK GDPR-compliant safeguards including the UK International Data Transfer Addendum and Standard Contractual Clauses where relevant.
7 · Your rights
Under the UK GDPR you have the right to:
Access — ask for a copy of the data we hold about you
Rectification — ask us to correct anything inaccurate
Erasure — ask us to delete your data ("right to be forgotten")
Restriction — ask us to stop processing while a query is resolved
Portability — ask for your data in a machine-readable format
Object — ask us to stop processing under "legitimate interests"
Withdraw consent at any time, where we relied on consent
To exercise any of these, message +44 7918 157439 with the words "data request" and your full name. We'll respond within 30 days, free of charge.
8 · Cookies & analytics
The website does not set any cookies. If we enable Cloudflare Web Analytics, it is a cookieless, privacy-first system that does not track individuals across sites and is fully UK GDPR compliant. No consent banner is required because no personal data is collected by it.
9 · Complaints
If you're unhappy with how we've handled your data, please tell us first — we'll try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO):
We'll post any updates to this page and change the "Last updated" date above. For material changes that affect existing data we hold about you, we'll contact you directly via WhatsApp.