Privacy Policy

1. What Information Do We Collect?

We collect personal information that identifies you or allows us to contact you. This is necessary to fulfill our contract with you and comply with our legal obligations.

Identity Data: Name, username, or similar identifier.
Contact Data: Billing address, delivery address, email address, and telephone numbers.
Financial Data: Payment card details (processed securely via encrypted third parties; we do not store full card details on our servers).
Technical Data: IP address, login data, browser type/version, and location data via cookies.

2. How We Use Your Information

In the UK, we must have a “lawful basis” for using your data. We use your information:

To Perform a Contract: Processing orders, executing payments, and delivering goods.
For Legitimate Interests: Improving our website, personalising your shopping experience, and enhancing customer service.
With Your Consent: Sending periodic newsletters or marketing SMS messages (which you can opt-out of at any time).
Legal Compliance: Keeping records for tax and VAT purposes.

3. Your Rights (UK GDPR)

Under UK law, you have significant rights regarding your data:

Access: You can request a copy of the personal data we hold about you (a “Subject Access Request”).
Correction: You can ask us to fix inaccurate or incomplete information.
Erasure: You can ask us to delete your data (the “Right to be Forgotten”) in certain circumstances.
Object/Restrict: You can object to our processing of your data for marketing or legitimate interests.
Data Portability: You can request your data be transferred to another service provider.

To exercise these rights, please email us at sales@studiographiteltd.co.uk.

4. How We Protect Your Data

We implement robust security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

SSL Encryption: All sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology.
External Verification: Our systems are scanned regularly for vulnerabilities.
Limited Access: Only authorised employees and trusted third-party service providers (who have agreed to confidentiality) have access to your data.

5. Cookies

We use cookies to remember items in your shopping cart and understand site traffic. We use tools like Google Analytics to help us improve.

You can manage your cookie preferences through your browser settings.
Note: Disabling cookies may limit your ability to use certain features on our site.

6. Third-Party Disclosure & Retention

Sharing: We do not sell or trade your personal data. We only share data with trusted partners (e.g., couriers like Royal Mail/DPD, or payment processors like Stripe/PayPal) required to complete your order.
Retention: We only keep your data for as long as necessary to fulfil the purposes we collected it for, including any legal, accounting, or reporting requirements (typically 6 years for UK tax purposes).

7. Complaints

If you have a concern about our data practices, we would appreciate the chance to deal with it first. However, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).