digiden • studio
Privacy Policy
Introduction
This Privacy Policy explains how digiDen Studio ("we," "our," or "us") collects, uses, and protects personal data when you visit our website at digiden.studio, contact us, become a client, or otherwise interact with our services.
We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are (Data Controller)
digiDen Studio is the data controller responsible for your personal data.
Contact: create@digiden.studio
Based in: United Kingdom
If you have any questions about this policy or how we handle your data, please get in touch at create@digiden.studio.
Personal Data We Collect
We may collect and process the following:
Contact details — name, email address, phone number, business name (provided when you complete a form, email us, or work with us).
Project information — content, files, login credentials, and other materials you share to help us deliver your project or WebCare service.
Billing information — billing name, address, and payment details (handled by our payment processor — see below).
Usage data — IP address, browser type, device type, pages visited, referrer, time on site, collected via cookies and similar technologies (see our Cookie Policy).
Communications — records of emails, messages, and meeting notes from our interactions with you.
How We Use Your Data and Our Legal Basis
Under UK GDPR we must have a lawful basis for processing your data. We rely on:
Responding to your enquiry or providing a quote — legitimate interests (responding to your request).
Delivering services you've signed up for (design work, WebCare, audits, consultations) — contract.
Processing payments and keeping financial records — legal obligation (UK tax and accounting law).
Sending you service updates relating to your project or subscription — contract.
Sending you our monthly newsletter (via Circle.so) — consent (you can opt out at any time).
Improving our website and understanding visitor behaviour — legitimate interests, or consent for non-essential cookies.
Complying with legal, regulatory, or tax obligations — legal obligation.
Who We Share Your Data With
We don't sell your data. We share it only with trusted third parties that help us operate our business. These currently include:
Stripe — payment processing
Framer — website hosting and analytics
Circle.so — client portal, community, and newsletter delivery
Bookla — booking and scheduling
HEY — business email
Loom — async video walkthroughs (only where you've chosen to view or send one)
Zoom — video calls (when scheduled)
Each of these processors handles your data under their own privacy terms and agreements compliant with UK GDPR (Standard Contractual Clauses or UK International Data Transfer Addendum where relevant).
We may also share your data where required by law, regulation, or a legitimate legal request.
International Data Transfers
Some of the third parties we use are based outside the UK and EEA (mainly in the United States). Where your data is transferred internationally, we rely on safeguards approved under UK GDPR, including:
Standard Contractual Clauses (SCCs) with the UK International Data Transfer Addendum (IDTA)
Adequacy decisions where these apply (e.g. EEA, UK Data Bridge with the US)
If you'd like more information about the specific safeguards used for any transfer, please email create@digiden.studio.
How Long We Keep Your Data
We only keep your data for as long as we need it:
General enquiries and quotes not progressed to a project — 3 years from last contact.
Active client and project files — duration of the project plus 3 years.
WebCare client records — duration of subscription plus 3 years.
Billing and invoice records — 6 years (UK statutory HMRC requirements for accounting records).
Newsletter subscribers — until you unsubscribe.
Website analytics (cookie-based) — per cookie durations (see Cookie Policy).
Email correspondence — 3 years from last contact, unless an ongoing relationship.
When data is no longer needed, we securely delete or anonymise it.
Your Rights
Under UK GDPR you have the following rights regarding your personal data:
Right to access — request a copy of the data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure — ask us to delete your data (some legal or contractual exceptions apply).
Right to restriction — ask us to limit how we use your data.
Right to data portability — ask for your data in a portable format.
Right to object — object to certain types of processing (including direct marketing).
Right to withdraw consent — where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, email create@digiden.studio. We'll respond within one month.
Right to Complain to the ICO
If you're unhappy with how we've handled your data, please get in touch with us first — we'll do our best to resolve things directly.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection authority:
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Security
We use reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. While no online system is 100% secure, we take security seriously and review our practices regularly.
Cookies
We use cookies and similar technologies on our website. For details, see our Cookie Policy.
Children's Data
Our services are not directed at children under 16, and we don't knowingly collect data from anyone under 16. If you believe we've inadvertently collected data from a child, please contact us so we can remove it.
Automated Decision-Making
We don't use automated decision-making or profiling that has legal or similarly significant effects on you.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date below. Significant changes will be communicated to active clients directly.
Contact
For any questions about this Privacy Policy or how we handle your data, please contact us at create@digiden.studio.
Last updated: 14 May 2026
