Privacy Policy
- We collect only what we need to sell you products and support you.
- We never see your full card details. Stripe handles payments.
- We don't sell your data, and we only send marketing emails if you opt in.
- You can see, correct or delete your data at any time.
1. Who we are
Studio 221 ([Studio221], [14 Bennetts Road, Horsham, West Sussex, RH135LA,]) is the controller of your personal data under UK data protection law. Contact us about privacy at support@studio221.co.uk. [ICO registration number, once registered.]
2. What we collect
- Account details: your email address and, if you give it, your name.
- Order details: what you bought, when, the price, tax, your country, and your agreement to immediate download.
- Payment details: handled by Stripe. We receive only limited information, such as the card type and last four digits.
- Download records: when you download a file and the IP address used, to protect against misuse and resolve disputes.
- Messages: what you send us through forms or email.
- Marketing preferences: whether you've chosen to hear about new releases.
3. Why we use it
| What we do | Legal basis |
|---|---|
| Create your account, process orders and give you access to downloads | To perform our contract with you |
| Send sign-in links, order confirmations and important account messages | To perform our contract with you |
| Keep order and tax records | To meet our legal obligations |
| Record downloads and prevent fraud or file sharing | Our legitimate interest in protecting our business |
| Reply to messages and enquiries | Our legitimate interest, or to take steps before a contract |
| Send emails about new releases and offers | Your consent, which you can withdraw at any time |
4. Who we share it with
We use trusted providers who process data on our behalf and only as we instruct:
- Stripe: payment processing and fraud prevention.
- Fasthosts: website hosting, in the UK.
- [EMAIL PROVIDER, e.g. Resend or Postmark]: sending account and order emails.
- [MAILING LIST PROVIDER, if used]: newsletter emails, only if you opt in.
We may also share data with professional advisers, HMRC or other authorities where the law requires it. We never sell your personal data.
5. International transfers
Some of our providers process data outside the UK, for example in the United States. When this happens, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Addendum, or a UK adequacy decision.
6. How long we keep it
- Account details: while your account is open.
- Order and tax records: 6 years after the end of the tax year of the order, as UK tax law requires. We keep these even if you delete your account.
- Download records: [e.g. 2 years].
- Messages and enquiries: up to 2 years after our last contact, unless they become part of an order or project.
- Marketing preferences: until you unsubscribe, plus a record that you did.
7. Cookies
We use only cookies that are needed for the site to work, such as keeping you signed in and protecting checkout from fraud. These don't need your consent. We don't use advertising or tracking cookies. If we add analytics in future, we'll ask for your permission first.
8. Your rights
You have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct anything that's wrong
- ask us to delete your data, where we don't need to keep it by law
- object to or ask us to restrict how we use it
- ask for your data in a portable format
- withdraw consent to marketing at any time, using the unsubscribe link or your Account settings
Email us to use any of these rights. We'll respond within one month.
9. Children
Our site isn't aimed at children under 13, and we don't knowingly collect their data. Customers under 18 should have a parent or guardian's permission to buy.
10. Changes and complaints
We'll update this policy if how we use data changes, and tell you about significant changes by email. If you're unhappy with how we've handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.