Privacy Policy

Your privacy is important to us. This Privacy Policy explains how Obettony Studios Ltd. collects, uses, and protects your personal information when you visit our website or use our services.

Last Updated: December 2024

Data Protection

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

GDPR Compliant

Our practices fully comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Your Rights

You have the right to access, rectify, erase, and port your personal data. You can also object to processing and withdraw consent at any time.

Information We Collect

Personal Information

When you interact with our services, we may collect:

  • Name and contact information (email address, phone number)
  • Company information and job title
  • Communication preferences
  • Project requirements and specifications

Technical Information

We automatically collect certain technical information:

  • IP address and browser information
  • Device type and operating system
  • Pages visited and time spent on our website
  • Referring websites and search terms

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our services. For detailed information about our cookie usage, please refer to our Cookie Policy.

How We Use Your Information

Service Delivery

To provide, maintain, and improve our creative services and solutions.

Communication

To respond to inquiries, send service updates, and provide customer support.

Marketing

To send promotional materials and updates about our services (with your consent).

Legal Compliance

To comply with legal obligations and protect our rights and interests.

Legal Basis for Processing

Contract Performance

We process your personal data to perform our contract with you, including providing creative services, managing projects, and handling payments.

Consent

For marketing communications and certain types of data processing, we rely on your explicit consent, which you can withdraw at any time.

Legitimate Interest

We process certain data based on our legitimate business interests, such as improving our services, preventing fraud, and conducting analytics.

Legal Obligation

We may process your data to comply with legal obligations, such as tax reporting, financial record-keeping, and regulatory requirements.

Data Sharing and Disclosure

Service Providers

We may share your information with trusted third-party service providers who assist us in operating our business, including:

  • Cloud storage and hosting services
  • Payment processing providers
  • Communication and email services
  • Analytics and marketing platforms

Legal Requirements

We may disclose your information if required by law or in response to valid legal processes, such as court orders, subpoenas, or regulatory investigations.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the business transaction.

Data Security

Technical Safeguards

  • SSL/TLS encryption for data transmission
  • Encrypted data storage and databases
  • Regular security audits and updates
  • Access controls and authentication

Organizational Measures

  • Employee training on data protection
  • Confidentiality agreements
  • Limited access on a need-to-know basis
  • Regular backup and recovery procedures

Data Breach Response

In the unlikely event of a data breach, we will promptly investigate, contain the incident, and notify affected individuals and authorities as required by law.

Your Rights Under GDPR

Right of Access

You have the right to obtain confirmation of whether we process your personal data and access to that data.

Right to Rectification

You can request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Portability

You have the right to receive your personal data in a structured, commonly used format.

Right to Object

You can object to processing of your personal data for direct marketing or legitimate interests.

Right to Restrict

You can request restriction of processing in certain circumstances.

Data Retention

General Retention Periods

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Client Information 7 years after project completion
Marketing Data Until consent withdrawn
Website Analytics 26 months maximum
Communication Records 3 years after last contact

Legal Requirements

Some data may be retained longer to comply with legal obligations, such as tax laws, financial regulations, or contractual requirements.

International Data Transfers

Transfer Safeguards

When transferring your personal data outside the European Economic Area (EEA), we implement appropriate safeguards:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules (BCRs)
  • Certification schemes and codes of conduct

UK Data Protection

As a UK-based company, we comply with both GDPR and UK Data Protection Act 2018 requirements for international transfers.

Contact Information & Complaints

Data Protection Contact

Obettony Studios Ltd.

14 Canary Wharf, London
E14 5AB, United Kingdom

Phone

+44 20 7946 0955

Email

info@obettony.com

Business Hours

Monday - Friday: 09:00 - 18:00
Weekends: Closed

How to Exercise Your Rights

To exercise any of your rights under this Privacy Policy, please contact us using the information above. We will respond to your request within one month.

  • Include "Data Protection Request" in your email subject
  • Specify which rights you want to exercise
  • Provide sufficient information to verify your identity
  • Include your contact details for our response

Right to Complain

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with a supervisory authority.

UK Supervisory Authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes.

Notification Method

We will notify you via email and prominent notice on our website at least 30 days before any changes take effect.

Your Consent

For significant changes, we may request your renewed consent where required by applicable law.

Version History

Previous versions of this policy are available upon request and may be archived on our website.