Privacy Policy

This Privacy Policy explains how Studio Scaped ("we", "us", "our") processes personal data when you visit or use our website and related services. We are committed to protecting your privacy and complying with applicable data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for your data?

The data controller responsible for personal data processed through this website is Studio Scaped. We do not provide any contact channel for privacy-related enquiries or for submitting data subject requests.

2. What personal data do we collect?

Depending on how you use the site, we may process:

• Technical and usage data — When you browse the site, our servers and service providers may automatically collect information such as your IP address, browser type and version, device type, operating system, referring URL, pages viewed, and approximate location derived from IP (e.g. country or region). This is typical for websites delivered over the internet.
• Analytics data — We use Google Analytics to understand how visitors use the site (e.g. page views, session duration, traffic sources). Google may set cookies and collect data as described in their policies.
• Data you choose to provide — If you use features on the site that ask for or accept information (e.g. search or location fields), we process what you enter as needed to provide that functionality.
• Location-related queries — If you use tools that search for shops or stockists by location, we may process addresses, postcodes, or coordinates you enter, and related query data, to return results. We do not use this to build a personal profile unless clearly stated at the point of collection.

We do not intentionally collect special category data (e.g. health) through this website. Please do not submit sensitive personal information through the site unless we explicitly ask for it and explain the lawful basis.

3. How and why we use your data (legal bases)

We process personal data only where we have a lawful basis under UK GDPR:

• Legitimate interests — Operating, securing, and improving the website; analysing aggregated usage; preventing abuse; and understanding how our content and features are used, where these interests are not overridden by your rights.
• Consent — Where we rely on cookies or similar technologies that require consent under the Privacy and Electronic Communications Regulations (PECR), we will obtain your consent where required (e.g. non-essential analytics). You may withdraw consent at any time.
• Contract / pre-contract — If you engage with us in a way that creates or could create a contractual relationship, we may process data necessary to respond or perform that contract.
• Legal obligation — Where we must retain or disclose information to comply with law or regulatory requests.

4. Cookies and similar technologies

We use cookies and similar technologies that are strictly necessary for the site to function, and cookies used for analytics (Google Analytics). You can control cookies through your browser settings. Blocking some cookies may affect site functionality. For more on Google's use of data, see Google's Privacy Policy and How Google uses information from sites that use their services.

5. Who we share data with

We may share data with:

• Hosting and infrastructure providers (e.g. Vercel or similar) that host the site and process technical logs.
• Google LLC (Analytics), potentially including processing in the United States under appropriate safeguards (e.g. UK extension to the EU-US Data Privacy Framework or Standard Contractual Clauses).
• Database or backend providers (e.g. Supabase) where store or directory data is served to the website.
• Professional advisers where required (e.g. lawyers, accountants).
• Authorities if required by law or to protect rights, safety, or security.

We do not sell your personal data.

6. International transfers

Some processors may be located outside the UK. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR (e.g. adequacy regulations, Standard Contractual Clauses, or the UK extension to the Data Privacy Framework, as applicable).

7. How long we keep data

We retain data only as long as necessary for the purposes described. Server logs and analytics may be retained for periods defined by our providers (often months). Correspondence is typically kept for as long as needed for those purposes and for a reasonable period thereafter for legal or operational reasons, in line with our providers' settings where applicable.

8. Your rights

Under UK data protection law you may have the right to:

• Access a copy of your personal data
• Rectify inaccurate data
• Erase data in certain circumstances
• Restrict processing in certain circumstances
• Data portability where processing is based on consent or contract and automated
• Object to processing based on legitimate interests
• Withdraw consent where processing is consent-based
• Lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk

We do not offer a way to submit access, erasure, or other data subject requests directly to us. If you are concerned about how we process personal data, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Our website is not directed at children under 13. We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will delete it where technically feasible.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. No transmission over the internet is completely secure; you use the site at your own risk in that regard.

11. Third-party websites

Our site may link to third-party sites. This policy does not apply to them. Please read their privacy policies before providing personal data.

12. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be highlighted on the site or communicated where appropriate. Continued use after changes constitutes acceptance of the updated policy where law allows.

This document is provided for general information and does not constitute legal advice. Studio Scaped may update practices; ensure this policy matches your actual data processing. Consider independent legal review for your jurisdiction and business model.