Privacy policy

Privacy policy

Privacy policy

Epigraph Studio Privacy Policy

Last Updated: September 2026


OVERVIEW


At Epigraph Studio (“we”, “us”, “our”), we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy outlines how we collect, use, store, and protect your information when you visit our website or engage our studio services, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. WHO WE ARE (DATA CONTROLLER)

Epigraph Studio is a brand implementation and asset production studio based just outside Shrewsbury Shropshire, United Kingdom.

  • Legal Entity: Epigraph Studio Ltd (Company No. 16341326, Registered in England & Wales)

  • Registered Office: 73 Station Road, Wem, Shrewsbury, SY4 5BJ.


If you have any questions regarding this policy or how we handle your personal data, please contact via our conversation form.

02. THE PERSONAL DATA THAT WE COLLECT

We only collect personal data that is necessary to evaluate studio capacity, communicate with you, and deliver our brand implementation services. This includes:

  • Identity & Contact Data: Name, job title, company name, business email address, phone number, and billing details provided when you submit a brief via our Conversation Page.

  • Project Parameters: Project briefs, brand guidelines, delivery timelines, and specifications provided for project evaluation.

  • Technical & Usage Data: IP address, browser type, operating system, and referral source collected automatically via our website hosting provider (Framer) when you navigate our site.


We do not collect sensitive personal data (special category data) or personal data relating to minors.

3. HOW & WHY WE PROCESS YOUR DATA (LEGAL BASIS)

Under UK GDPR, we rely on the following lawful bases to process your personal information:

  1. Contractual Necessity & Pre-Contractual Steps: Processing inquiry data submitted via our intake form to evaluate studio capacity, issue proposals, agree on delivery blocks, and execute artworking projects.

  2. Legitimate Interests: Processing business inquiries to maintain professional client relationships, ensure smooth studio operation, and prevent fraud.

  3. Legal Obligation: Retaining invoice, payment, and transaction records to fulfill UK tax (HMRC) and statutory reporting requirements.

  4. Consent: Placing non-essential cookies on your device where you have explicitly agreed via our cookie consent banner.


4. HOW WE STORE & PROTECT YOUR DATA

Data security is central to our operational discipline.

  • Storage: Your information is stored securely on encrypted cloud systems and trusted service infrastructure, including Framer hosting and professional email providers.

  • Security: We enforce strict access controls and encrypted protocols (HTTPS/SSL) to protect against unauthorized access, loss, or disclosure.

  • Data Retention: We retain client project records and financial correspondence for a minimum of 6 years to satisfy UK legal and accounting requirements. General project inquiry data that does not lead to an active booking is routinely deleted after 12 months.


    5. THIRD-PARTY DATA SHARING


    We never sell, rent, or trade your personal data to third parties. We only share information with trusted third-party service providers who assist in operating our website and delivering our services (such as website hosting platforms, cloud storage, and accounting software). All service providers are contractually required to maintain UK GDPR-compliant security standards.


    6. YOUR RIGHTS UNDER UK GDPR


    As a UK data subject, you hold the following rights regarding your personal data:


    • Right of Access: The right to request a copy of the personal data we hold about you.

    • Right to Rectification: The right to request corrections to incomplete or inaccurate data.

    • Right to Erasure (“Right to be Forgotten”): The right to request deletion of your data, subject to legal record-keeping obligations.

    • Right to Restrict or Object: The right to limit or object to our processing of your personal data.

    • Right to Data Portability: The right to receive your data in a structured, commonly used electronic format.

    To exercise any of these rights, please contact us via our conversation form. We respond to all legitimate requests within one calendar month.


    7. COMPLAINTS


    If you have concerns about how we handle your data, we ask that you contact us first so we can resolve the issue promptly. You also have the right to lodge a formal complaint with the UK supervisory authority:


    • Information Commissioner’s Office (ICO): www.ico.org.uk | Helpline: 0303 123 1113