LEGAL COMPLIANCE & DATA GOVERNANCE
PRIVACY POLICY
Last updated: October 2024 • UK GDPR & Data Protection Act 2018 Compliant
POLICY OVERVIEW
The Edit Studio Services is committed to protecting your personal data and respecting your privacy rights under UK Data Protection legislation. This document outlines our data collection, processing, security protocols, and your statutory rights.
DATA PROTECTION OFFICER
privacy@theeditstudio.co.uk
London, United Kingdom
1. Introduction
Welcome to The Edit Studio Services. We respect your privacy and are dedicated to safeguarding your personal data. This privacy policy informs you how we look after your personal data when you visit our website, engage our digital creative design services, or interact with our digital assets, and informs you of your privacy rights under applicable UK law.
2. Who We Are (Data Controller)
The Edit Studio Services acts as the data controller and is responsible for your personal data. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact our Data Governance team using the details provided below.
3. The Information We Collect
We may collect, use, store, and transfer different kinds of personal data about you, including Identity Data (full name, title), Contact Data (email address, telephone number, billing address), Financial Data (payment details handled via encrypted processors), Transaction Data (service details, invoice records), Technical Data (IP address, browser type, operating system), and Usage Data (analytics on website interaction).
4. How We Collect Your Data
We collect data through direct interactions when you fill out contact or inquiry forms, commission design projects, subscribe to publications, or communicate with us via email. Automated technologies and cookies also collect technical telemetry as you browse our digital interfaces.
5. Lawful Bases for Processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on legitimate lawful bases: Performance of a Contract when delivering commissioned design services; Legitimate Interests for business enhancement and fraud prevention; Legal Obligation to comply with tax and statutory requirements; and Consent where explicitly obtained for direct marketing communications.
6. Cookies and Tracking Technologies
We use essential cookies to enable seamless website performance and security. Analytics cookies are deployed strictly with your consent to analyze site navigation and enhance user experience. You can adjust your browser settings to refuse or alert you to cookies.
7. Newsletter & Marketing Communications
When you subscribe to our design insights, studio news, or service updates, we store your contact information until you choose to unsubscribe. Every marketing email includes a direct opt-out link, and you may withdraw consent at any time without affecting prior lawful processing.
8. Purchases and Invoicing
All commercial transactions, retainer billing, and asset licensing purchases are processed through verified PCI-DSS compliant payment gateways. We do not store full credit card credentials on our studio servers.
9. NFT and Blockchain Information
Where digital creative deliverables involve smart contracts, digital provenance, or NFT minting, public wallet addresses and on-chain transaction histories are recorded immutably on decentralized networks by design. Please note that public blockchain entries cannot be modified or deleted.
10. Third-Party Disclosures & Service Providers
We partner with vetted third-party vendors who provide cloud hosting, customer relationship management, project collaboration tools, and legal/accounting advisory services. All third-party providers operate under strict data processing agreements ensuring equivalent data protection compliance.
11. International Transfers
Whenever we transfer personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are implemented, including standard contractual clauses approved by the UK Information Commissioner's Office (ICO) and robust encryption standards.
12. Data Retention Period
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for satisfying statutory legal, accounting, or reporting requirements (typically 6 years for commercial contracts and tax compliance in the UK).
13. Data Security & Encryption
We have implemented strict technical and organizational security measures to prevent unauthorized access, alteration, disclosure, or accidental loss of your personal information. Access is restricted strictly to employees and contractors with a defined business need.
14. Your Statutory Legal Rights
Under UK data protection laws, you possess statutory rights including: Right of Access (Subject Access Request), Right to Rectification of inaccurate records, Right to Erasure ('Right to be Forgotten'), Right to Restrict Processing, Right to Data Portability, and Right to Object to processing based on legitimate interests.
15. How to Exercise Your Rights
To exercise any of your statutory rights, please email privacy@theeditstudio.co.uk. You will not have to pay a fee to access your personal data, and we aim to respond to all legitimate requests within one calendar month.
16. Children's Privacy
Our digital creative services and website are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that a child has provided us with personal information, we promptly delete it from our systems.
17. Automated Decision Making & Profiling
The Edit Studio Services does not employ automated decision-making systems or profiling mechanisms that produce legal effects or similarly significant consequences concerning individuals.
18. External Links to Third-Party Sites
Our website may include links to third-party partner websites, plug-ins, and external portfolio showcases. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
19. Changes to This Privacy Policy
We keep our privacy policy under regular review. Any updates or revisions will be published on this page with an updated revision date. Substantial alterations will be communicated directly to active clients where appropriate.
20. Regulatory Complaints (ICO)
You have the statutory right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us in the first instance.
21. Contact Information
If you have any questions, clarifications, or requests regarding this Privacy Policy or our data handling practices, please write to us at:
The Edit Studio Services
Data Protection & Legal Affairs
Email: privacy@theeditstudio.co.uk
London, United Kingdom