Privacy Policy

STUDIO EB DESIGN CO. PRIVACY AND COOKIE POLICY - LAST UPDATED: SEPTEMBER 2025
Studio EB Design Co.
Sole trader, owned and operated by Eleanor Butcher

Welcome to Studio EB (“we”, “our”, “us”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website www.studioeb.co.uk or our related services. By using our Site, you agree to this Privacy Policy. For the purposes of this policy, Studio EB is the data controller.

1. Information We Collect
We may collect the following types of personal information when you interact with our website or services:

  • Personal Identification Information: Name, email address, phone number, postal address, and any other information you voluntarily provide (e.g. when contacting us).

  • Usage Data: Information collected automatically when you use our Site, such as IP address, browser type and version, operating system, referral source, and browsing behaviour on our site.

  • Cookies: We may use cookies to enhance your experience on our site and analyse website traffic. You can adjust your browser settings to refuse cookies if you prefer. You can find information on the cookies SquareSpace uses here.

  • Payment Data: If you purchase services, payment details are processed securely by third-party providers. We do not store your card details.

2. How We Use Your Information
We use the information we collect for the following purposes:

  • To provide and improve our services, including design consultations and branding solutions.

  • To communicate with you, including responding to inquiries, providing updates, sending newsletters, and offering promotions.

  • To improve our Site: analyse traffic and usage patterns.

  • To personalise your experience: tailor content and services.

  • To comply with legal obligations: record keeping, tax, or regulatory requirements.

  • To ensure security: detect and prevent fraud or misuse of our Site.

3. Legal Bases for Processing
We process your personal data under the following lawful bases (as required by UK GDPR):

  • Consent – for sending marketing emails and placing non-essential cookies.

  • Contract – where processing is necessary to provide the services you request.

  • Legal obligation – to comply with laws such as tax and accounting rules.

  • Legitimate interests – to improve our services, analyse usage, and ensure security (provided these interests do not override your rights).

4. Sharing Your Information
We will never sell your personal information. We may share your data with trusted third parties who help us operate our business, such as:

  • Website hosting and platform providers (e.g. Squarespace).

  • Payment processors (e.g. Stripe, PayPal).

  • Email marketing tools (e.g. Mailchimp).

  • Analytics providers (e.g. Google Analytics).

These providers are contractually required to protect your data and only use it for the services we request. If data is transferred outside the UK/EEA (e.g. to the United States), we ensure adequate safeguards are in place (such as Standard Contractual Clauses approved by the UK government).

5. Cookies
Cookies are small text files placed on your device when you visit our Site. They allow us to recognise your device, remember your preferences, and improve your experience.

Cookies may be:

  • Session cookies – deleted automatically when you close your browser.

  • Persistent cookies – remain on your device until they expire or are deleted.

  • First-party cookies – set by us directly.

  • Third-party cookies – set by other organisations (e.g. Squarespace, Google).

Types of Cookies We Use
We use the following categories of cookies:

  • Strictly necessary cookies: required for our Site to function properly (e.g. security, login, shopping cart). These do not require consent.

  • Analytics cookies: help us understand how visitors use our Site (e.g. pages visited, time spent). This helps us improve our Site.

  • Functional cookies: remember your preferences (e.g. language, region) to provide a better user experience.

  • Marketing cookies: track browsing activity across websites to deliver relevant advertising and measure the effectiveness of campaigns.

Third-Party Cookies
Some cookies are set by third parties:

  • Squarespace cookies for website performance, security, and analytics. See Squarespace’s Cookie Policy.

  • Google Analytics for visitor behaviour analysis. See Google’s Privacy Policy.

  • Social media / advertising platforms (if enabled) e.g., Facebook Pixel for targeted advertising.

Consent and Control
We will only place non-essential cookies (analytics, functional, marketing) if you give consent via our cookie banner when you first visit our Site.

You can manage your preferences at any time:

  • Through our cookie banner or settings panel.

  • By adjusting your browser settings (e.g. blocking cookies or alerting you when a cookie is placed).

  • Using opt-out tools such as Your Online Choices.

Disabling cookies may affect the functionality of our Site.

6. Data Retention
We keep your personal data only as long as necessary for the purposes we collected it:

  • Account/communication data: kept for up to 2 years after your last interaction.

  • Payment/transaction records: retained for 6 years, as required by UK tax law.

  • Marketing data: kept until you withdraw consent or unsubscribe.

After this period, your data will be securely deleted or anonymised.

7. Data Security
We take appropriate security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. However, no method of online transmission or storage is 100% secure, so we cannot guarantee absolute security.

8. Your Rights
Under UK data protection law, you have the following rights:

  • Right to be informed – about how we use your data (this policy fulfils that).

  • Right of access – request a copy of the data we hold about you.

  • Right to rectification – correct inaccurate or incomplete data.

  • Right to erasure – request deletion of your data.

  • Right to restrict processing – ask us to limit how we use your data.

  • Right to data portability – receive your data in a machine-readable format or request we transfer it to another provider.

  • Right to object – to our processing, particularly for marketing purposes.

  • Rights in relation to automated decision-making/profiling – if applicable.

To exercise these rights, please contact us.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
www.ico.org.uk

9. Children’s Privacy
Our services are not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to this Privacy Policy
We may update this Privacy Policy occasionally to reflect changes in our practices or for legal reasons. We encourage you to review this page periodically to stay informed about how we protect your information.

11. Contact Us
If you have any questions or concerns about this Privacy Policy or your personal information, please contact us.