Privacy Policy

1. Who we are

Studio Nought is a UK-based web development studio. We design, build, host and maintain websites and related digital products for businesses, including startups and professional services firms.

For data protection purposes, Studio Nought is the data controller for information collected through this website and our standard enquiry and onboarding processes, unless we tell you otherwise in a specific agreement.

You can contact us at: hello@studionought.co.uk

2. The information we collect

We collect only what we need to respond to enquiries, deliver services, and run our website securely. This may include:

We do not ask you to send payment card details or passwords by email. If we need additional information to deliver a service, we will explain why and use appropriate secure channels.

3. How we use your information

We use personal data to:

• Respond to enquiries and arrange calls or proposals
• Deliver, host and support websites and related services under contract
• Send service-related messages (for example billing or technical notices)
• Improve our website and offerings through analytics and aggregated insights
• Meet legal, tax and regulatory obligations
• Maintain security, prevent abuse, and resolve disputes

We do not sell, rent or trade your personal data.

4. Lawful basis for processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on:

• Contract — where processing is necessary to enter into or perform an agreement with you or your organisation
• Legitimate interests — for example operating our website, answering enquiries, and improving our services, balanced against your rights
• Consent — where you opt in to marketing cookies or non-essential communications (where applicable)
• Legal obligation — where the law requires us to process data

You may withdraw consent at any time where we rely on it, without affecting the lawfulness of earlier processing.

5. How we share your information

We may share data only with:

• Trusted infrastructure and tooling providers (for example hosting, email delivery, analytics) who process data on our instructions
• Professional advisers where reasonably necessary (for example accountants or lawyers under confidentiality)
• Authorities or law enforcement when required by applicable law

We use written agreements or standard terms with processors where required, and we do not allow them to use your data for their own marketing.

If personal data is transferred outside the UK, we ensure appropriate safeguards (such as the UK extension to the EU Commission's standard contractual clauses or UK IDTA) unless a limited exception applies.

6. Data retention

We keep information only as long as needed for the purposes above, including:

• Managing enquiries and client relationships
• Legal, tax and regulatory record-keeping
• Defending or bringing legal claims

Retention periods vary by context (for example active projects vs cold enquiries). Where possible we minimise what we hold and delete or anonymise data when it is no longer required.

7. Your data rights

Under UK data protection law you may have the right to:

• Access — request a copy of your personal data
• Rectification — ask us to correct inaccurate information
• Erasure — request deletion in certain circumstances
• Restriction — ask us to limit processing in certain circumstances
• Data portability — receive some data in a structured, machine-readable format
• Object — object to processing based on legitimate interests or direct marketing

To exercise these rights, contact hello@studionought.co.uk. We may need to verify your identity before responding.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk.

8. Marketing communications

We may send occasional updates about our services where we have a lawful basis to do so. You can opt out of marketing at any time by using the unsubscribe link in emails or by contacting us directly.

10. Security

We apply appropriate technical and organisational measures designed to protect personal data, including secure hosting, access controls, and staff awareness. No online transmission or storage is completely secure; we cannot guarantee absolute security.

11. Links to other websites

Our website may link to third-party sites. We are not responsible for their content or privacy practices. Please read their policies before you submit personal information.

12. Updates to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Please review it periodically.

13. Contact us

Studio Nought
Email: hello@studionought.co.uk