Privacy policy

This policy explains what personal data Stay Found Studio Ltd collects when you visit www.stayfound.studio, book a call or get in touch, what we do with it, and the rights you have over it. We keep it to the minimum we need to reply to you and do our work.

Who we are

Stay Found Studio Ltd (“Stay Found Studio”, “we”, “us”) is the controller of your personal data. We are a small website design studio at 14A Queen Square, Bath, BA1 2HN. We are registered in England and Wales under company number 17025022. Our registered office is 167–169 Great Portland Street, London, W1W 5PF. We are registered with the Information Commissioner’s Office under number ZC196731.

For any question about this policy or your data, email hello@stayfound.studio or write to us at Stay Found Studio Ltd, 14A Queen Square, Bath, BA1 2HN.

What we collect

When you book a call, fill in a form on this site or email us, we collect:

• your name
• your email address
• your business’s website
• how you heard about us
• any notes you choose to add about your business or project

When you book a call we also receive the date and time you chose and your time zone. If you phone us, we will see your phone number. If you email us, we receive whatever you include in the email.

Please don’t send us sensitive information, such as details of your health, in your notes or messages. We don’t need it.

Like every website, our hosting provider automatically receives technical information when you visit, such as your IP address, browser and the page requested. It is used to deliver the site and protect it from abuse. We don’t use it to identify you.

How we use it and our legal basis

Under UK data protection law we must have a legal basis for each use:

• Replying to your enquiry and arranging a call. We use your details to respond, prepare for the call and, if you ask, send you a proposal. Our legal basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
• Working together. If you become a client, we use your details to deliver the work, invoice you and keep business records. Our legal basis is performing our contract with you and complying with our legal obligations, such as tax record-keeping.
• Running and securing the website. Our legal basis is our legitimate interest in keeping the site available and safe.
• Analytics. We use Google Analytics to see how many people visit and which pages they read. It runs only if you accept it in our cookie banner. Our legal basis is your consent, which you can withdraw at any time. See our cookie policy.

We don’t send newsletters or marketing emails, and we won’t add you to a mailing list. We never sell your data or use it for automated decision-making or profiling.

Who we share it with

We only share your data with trusted service providers who process it on our behalf, under contract, and only for the purposes above:

• Cal.com, which runs our booking calendar and stores the details you enter when booking a call.
• Google Workspace, which provides our email, calendar and the Google Meet video calls we hold intro calls on.
• Cloudflare, which hosts this website and protects it from attacks.
• Google Analytics, if you accept analytics cookies, which measures how the site is used.
• A form-handling service, if you send us a message through a form on this site, which delivers the message to our inbox.
• Our accountant and professional advisers, where we need to, if you become a client.

We may also disclose data if the law requires it, for example to HMRC.

International transfers

Some of these providers, including Cal.com, Google and Cloudflare, are based in the United States or process data there. Where your data leaves the UK, we make sure it is protected by an adequacy decision, such as the UK Extension to the EU–US Data Privacy Framework, or by the UK’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

How long we keep it

• Enquiries and call bookings that don’t lead to work are deleted within 12 months of our last contact.
• Client records are kept for six years after our work together ends, as UK tax and company law requires.
• Hosting logs are kept by Cloudflare for a short period, then deleted.

How we protect it

We use reputable providers, secure connections, strong unique passwords and two-factor authentication, and we limit access to your data to the people who need it.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to us using your data on the basis of legitimate interests
• ask for your data in a portable format
• withdraw your consent at any time, where we rely on it

To use any of these rights, email hello@stayfound.studio. There is no charge, and we will reply within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Children

Our services are for businesses, and this site is not intended for anyone under 18. We don’t knowingly collect data from children.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it last changed.