Effect Studio — Connect Button
Connect

Privacy Policy

Effect Studio Ltd  |  Last updated: 29 July 2026

DRAFT: prepared as a working draft for solicitor review before publication. Bracketed items marked [ ] need to be confirmed or inserted before this document goes live.

1. Introduction

This Privacy Policy explains how Effect Studio Ltd (company number 16129376), registered office 17 Mayfly Wy, Old Ipswich Rd, Ardleigh, Colchester, CO7 7WX (“Effect Studio”, “we”, “us”, “our”) collects, uses and protects personal data when you visit effectstudio.co.uk (the “Site”) or otherwise interact with us. We are the data controller for the personal data described in this policy.

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where relevant to visitors based in the European Economic Area, the EU General Data Protection Regulation (EU GDPR).

2. Who to contact

Data protection queries can be directed to our team at info@effectstudio.co.uk, or by post to the address above. Given the size and nature of our processing, we have not appointed a formal Data Protection Officer; our team is responsible for handling data protection matters.

3. What personal data we collect

  • Contact and enquiry data: name, email address, phone number, company name and any message content submitted through the contact form on our Site.
  • Technical and usage data: IP address, browser type, device information, pages visited and referral source, collected automatically via cookies and similar technologies (see our Cookie Policy).
  • Correspondence: records of any email or other communication you have with us.

We do not knowingly collect any special category data (such as health, ethnicity or religious belief) through the Site, and we ask that you do not include such information in enquiry forms.

4. How we use your personal data and our lawful basis

We use personal data for the following purposes, relying on the lawful bases indicated:

  • To respond to enquiries submitted through our contact form: legitimate interests, since responding to business enquiries is necessary to operate our agency and does not override your interests or fundamental rights.
  • To provide quotes, proposals and deliver contracted services to clients: performance of a contract, or steps taken at your request prior to entering into a contract.
  • To send marketing communications, where we introduce this in future (for example through Mailchimp): consent, which you can withdraw at any time.
  • To analyse Site usage and improve our services (Google Analytics), and to measure and tailor advertising (Meta Pixel): consent, obtained through our cookie banner before these technologies are activated.
  • To comply with legal obligations, for example accounting and tax records: legal obligation.

5. Cookies

Our Site uses cookies and similar technologies, including Google Analytics and Meta Pixel. Non-essential cookies are only set once you have given consent through our cookie banner. Full details of the cookies we use, their purpose and how to manage your preferences are set out in our Cookie Policy.

6. Sharing your personal data

We may share personal data with:

  • Service providers who support our operations, including our website hosting provider, website and form plugin providers (Elementor), and, where activated, Google (Google Analytics) and Meta (Meta Pixel).
  • Professional advisers, including accountants and legal advisers, where necessary.
  • Regulatory or law enforcement bodies, where we are required to do so by law.

We do not sell personal data to third parties. We do not use artificial intelligence tools to process personal data submitted by visitors or clients through the Site; our use of AI tools is confined to internal creative production work and does not involve identifiable personal data.

7. International transfers

Some of our service providers, including Google and Meta, may process personal data outside the UK and European Economic Area, including in the United States. Where this occurs, we ensure appropriate safeguards are in place, such as reliance on an adequacy decision, Standard Contractual Clauses, or the UK International Data Transfer Addendum, so your data continues to receive an equivalent level of protection.

8. How long we keep your data

  • Enquiry form submissions are retained for up to 24 months from the date of last contact, unless a client relationship is established, in which case data is retained in line with our contractual and accounting obligations, generally 7 years after a contract ends.
  • Analytics data is retained in accordance with the retention periods configured within Google Analytics, set not to exceed 14 months.
  • Marketing consents and unsubscribe records are retained for as long as necessary to demonstrate compliance with the law.

9. Client portal

We are introducing a client portal, hosted on a separate domain to this Site. Where you access the portal, a separate privacy policy specific to that domain and its functionality will apply, which we will make available before or upon your first login.

10. Your rights

Under UK GDPR, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data, in certain circumstances
  • Request restriction of processing
  • Object to processing carried out on the basis of legitimate interests, including direct marketing
  • Request data portability, where technically feasible
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us using the details in section 2. We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, via ico.org.uk or by calling 0303 123 1113. If you are based in the EEA, you may also have the right to complain to your local supervisory authority.

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including secure hosting, access controls and regular software updates. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children

Our Site and services are directed at businesses and professionals. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. Any changes will be posted on this page with an updated effective date.

14. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, contact us at:

Effect Studio Ltd

17 Mayfly Wy, Old Ipswich Rd, Ardleigh, Colchester, CO7 7WX

info@effectstudio.co.uk