Last updated: 2 October 2025
Studio Duncalf (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and your rights.
Controller:
Studio Duncalf
Email: hello@studioduncalf.com
Contact data: name, email address, phone number, company, and the content of messages sent via our website forms or by email.
Technical data: IP address, device and browser information, pages viewed, referring/exit pages, and timestamps.
Usage & cookies data: preferences and interactions gathered via cookies and similar technologies (see Cookies section).
Client/project data (if you become a client): billing details, project requirements, and related correspondence.
Directly from you: when you submit a form, email us, call us, or otherwise contact us.
Automatically: via our WordPress website using cookies, server logs, and analytics tools.
We process personal data only where a lawful basis applies:
To respond to enquiries and provide quotes/services (Contract or Legitimate Interests).
To manage our website, troubleshoot, and keep it secure (Legitimate Interests; Legal Obligation for security).
To maintain records and communicate with you (Legitimate Interests; Contract).
To comply with laws and enforce legal rights (Legal Obligation; Legitimate Interests).
With your consent for any optional activities (you can withdraw consent at any time).
We do not sell your data. We may share it with:
Service providers/“processors” who support our website, hosting, security, backups, analytics, and email delivery. Our website runs on WordPress and is hosted with a third-party provider; emails submitted through the site are processed through our website and routed to our email service.
Professional advisers (lawyers, accountants) under confidentiality.
Authorities when required by law or to protect legal rights.
We require all processors to safeguard personal data and to act only on our instructions.
Some providers may process data outside the UK. Where this occurs, we rely on UK adequacy regulations, ICO-approved Standard Contractual Clauses, or other lawful transfer mechanisms, and implement additional safeguards where appropriate.
Enquiry data: typically up to 24 months after our last interaction.
Client/project and invoicing records: typically 7 years to meet legal and tax requirements.
Technical/analytics data: retention per tool configuration and necessity for security and performance.
We keep data only as long as necessary for the purposes described above.
We use appropriate technical and organisational measures to protect personal data, including secure hosting, software updates, access controls, and least-privilege access.
Our WordPress site uses cookies for core functionality, performance, and (where implemented) analytics. You can control cookies in your browser settings. If required by law, we will present a cookie banner to obtain consent for non-essential cookies and provide a link to a Cookie Policy detailing cookie types, purposes, and lifespans.
You have the right to:
Access your personal data and receive a copy.
Rectify inaccurate or incomplete data.
Erase your data (where applicable).
Restrict or object to processing in certain circumstances.
Data portability (for data you provided to us, where the legal basis is consent or contract and processing is automated).
Withdraw consent at any time where processing is based on consent.
To exercise your rights, contact privacy@studioduncalf.com. We may need to verify your identity and we will respond within one month where feasible.
Our services are not directed at children and we do not knowingly collect personal data from children.
Our website may link to other sites. We are not responsible for their content or privacy practices. Please review their privacy policies.
We may update this policy to reflect legal, technical, or business developments. The “Last updated” date will indicate the latest version.
If you have questions or concerns about this policy or your data, contact:
Studio Duncalf, Privacy: privacy@studioduncalf.com
You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk or 0303 123 1113.