Who is responsible
This website is operated by Alexander Caulfield trading as Studio Wye, a UK sole trader. Alex is responsible for deciding how personal information is used for Studio Wye enquiries and newsletters. In this notice, “we”, “us” and “our” mean Studio Wye.
For privacy questions or requests, email hello@studiowye.com. Our postal address is on the legal & contact details page.
Information & purposes
When you get in touch
We use your name, email address, message and any company or project details you choose to share to answer you, discuss a brief and prepare a proposal. Optional budget, timing and usage details help us understand the work. Please leave out sensitive personal information that is not needed for the enquiry.
Our basis: taking steps at your request before a contract, where you would be the contracting person. For general questions and contacts acting for a business, our legitimate interest is responding to relevant correspondence and running the studio. We consider that interest alongside your rights.
When you subscribe
We use your email address, confirmation status and consent record to manage your subscription to Coffee & Catchup. The signup form asks only for your email address. Kit sends the confirmation email and will deliver the newsletter to confirmed subscribers. Delivery information helps handle failed messages and keep the mailing list working. Kit’s standard email reporting also records opens and link clicks against subscriber records; this is explained below.
Our basis: your consent for newsletter marketing. We keep the limited records needed to demonstrate your choice and honour an unsubscribe.
When you browse
Hosting and security services may handle your IP address, browser and device details, requested pages, timestamps and error or security events. These help deliver the site, investigate faults and prevent abuse.
Our basis: our legitimate interest in providing a reliable, secure website. Optional device storage and third-party playback are explained below. We have not added website analytics or advertising trackers.
We do not sell your personal information or use it for solely automated decisions that have legal or similarly significant effects on you.
Service providers
Providers help deliver the website and handle communications. They receive the information needed for their role:
- Kit Newsletter subscriptions & delivery
- Processes subscriber details, signup verification, confirmation, delivery and unsubscribe records for Coffee & Catchup on our behalf. Its standard reporting also includes subscriber-level email opens and link clicks, as explained above. Subscriber processing is covered by Kit’s Data Processing Addendum. Kit also handles some service and security information under its own privacy policy.
- Web3Forms Enquiry delivery
- Receives enquiry fields and technical request information, filters spam and sends the message to our fixed studio inbox. Your email address is used so Alex can reply to you. Its spam checks may involve specialist providers processing your email and IP address. See Web3Forms’ privacy policy and the retention information below.
- Google Workspace Business email
- Handles messages sent to the studio’s business inbox, including your address, message and any attachments. We use email to reply and manage the conversation.
- OpenAI Sites & Cloudflare Hosting & security
- The site is hosted through OpenAI’s Sites service, using Cloudflare infrastructure. Hosting and security services may process technical request data and use necessary storage to deliver and protect the site.
We may also need to share relevant records with professional advisers or authorities where necessary for a legal obligation or a specific dispute. We do not share enquiries with a mailing list for marketing.
International processing
Some providers process information outside the UK, including in the United States. We do not promise UK-only storage.
Kit’s published Data Processing Addendum provides for the EU–US Data Privacy Framework and its UK extension. It also incorporates European Commission Standard Contractual Clauses together with the UK International Data Transfer Addendum for UK transfers. These are safeguards for overseas processing; they do not mean the data stays in the UK.
Web3Forms is operated by Web3Creative in India and uses infrastructure in other regions. Its Data Processing Agreement incorporates Standard Contractual Clauses with the UK Addendum where applicable.
Contact hello@studiowye.com for information about the safeguards relevant to your information, including how to obtain a copy where applicable.
Cookies, video & storage
Site preferences
Where the store offers “Remember my currency”, choosing it allows the site to save your currency in your browser’s localStorage. This is optional. You can withdraw the choice through the same control or clear the site’s stored data in your browser. Without this choice, we do not save your currency preference in browser storage. Your selection may remain in the page address and store links as you browse.
Video playback
The site’s fonts and video thumbnails are hosted locally. A YouTube player loads only after you choose “Load YouTube video”. That choice lets Google/YouTube receive technical information such as your IP address and browser details, and it may use cookies or similar storage under Google’s privacy policy. You can choose the ordinary “Watch on YouTube” link instead; that opens YouTube’s website. Videos hosted directly by Studio Wye do not require loading a YouTube player.
Necessary hosting storage
Hosting security may require cookies or similar storage to protect the service. We have not added analytics or advertising cookies. This does not mean that the hosting platform or a third-party service you choose to use is entirely cookie-free.
How long we keep it
We keep information for its purpose, then delete it or reduce it to what is still needed. Our retention schedule is:
Web3Forms copies: our dashboard retention setting is seven days. Its published Data Processing Agreement allows underlying submission copies to remain for up to three years. This is separate from messages delivered to our inbox, which follow the schedule below.
- Enquiries that do not become work: review every three months and delete within 12 months of the last meaningful contact, unless the discussion is continuing or a specific legal issue requires the record.
- Active projects: keep the correspondence needed to complete the work and meet relevant legal obligations or deal with claims. Review closed project records annually and record why any longer retention is needed.
- Unconfirmed newsletter signups: review and remove after 30 days if the address has not been confirmed.
- Active subscribers: keep subscription details while you choose to receive the newsletter. An unsubscribe stops marketing; it does not necessarily erase the minimal suppression record needed to avoid adding you again.
- Consent and suppression records: keep only what is needed to demonstrate permission and respect your choice, with an annual review.
- Technical and security records: retention depends on the provider’s policies, applicable account settings and any specific security investigation.
These are review and deletion tasks for the studio, not a claim that the website automatically deletes every record. The schedule must also cover provider-held submission copies. Deleted information may remain in restricted provider backups until those backups are replaced under the provider’s retention process.
Your rights & complaints
Depending on the circumstances, you can ask for access to your information, correction, deletion, restricted use or a portable copy. You can object to processing based on legitimate interests and withdraw marketing consent at any time. Some rights have legal conditions or exceptions; we will explain these if they affect a request.
Email hello@studiowye.com with what you would like us to do. We may need proportionate information to verify your identity. We normally respond to rights requests within one month and will explain any lawful extension.
If you have a privacy complaint, use the same address. We will acknowledge it within 30 days, investigate without undue delay and explain the outcome. You can also raise a concern with the Information Commissioner’s Office, the UK’s data protection regulator.
Changes to this notice
We will update this notice when our services or use of personal information changes. The date at the top shows the latest revision. We will explain significant changes before using information in a materially different way and seek fresh consent where needed.
A question about your information?
hello@studiowye.com