Privacy Policy

Last updated: January 2026

Studio 8 (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how your information is collected, used, stored, and protected when you visit our website or engage our services.

Studio 8 is a trading name of Madeline Mills, a UK sole trader.

1. Who We Are

Legal entity: Madeline Mills trading as Studio 8
Business type: Sole trader
Country of operation: United Kingdom

Contact details:
Email: info@studio8creates.com
Business address: available on request

2. What Personal Data We Collect

We may collect and process the following personal data:

  • Identity data: name, company name

  • Contact data: email address, phone number

  • Business information: project details, correspondence

  • Technical data: IP address, browser type, device information

  • Usage data: pages visited, time spent on site

  • Marketing preferences: where consent is given

We do not knowingly collect data from children under 16.

3. How We Collect Your Data

We collect data when you:

  • Contact us via forms, email, or phone

  • Subscribe to updates or newsletters (if applicable)

  • Engage our services

  • Visit our website (via cookies and analytics tools)

4. Website Hosting & Security

Our website is hosted on Squarespace.

Squarespace provides the online platform that allows us to present our services and collect enquiries. Your data may be stored through Squarespace’s data storage, databases, and general Squarespace applications.

Squarespace secures your data through:

  • Secure servers

  • Firewalls

  • Encrypted data transmission (SSL/TLS)

Squarespace processes personal data in accordance with applicable data protection laws and maintains its own privacy and security standards.

For more information, you can review Squarespace’s Privacy Policy directly on their website.

5. How We Use Your Data

We use your data to:

  • Respond to enquiries

  • Provide services and manage projects

  • Send service-related communications

  • Improve website performance and user experience

  • Comply with legal and tax obligations

We will never sell your personal data.

6. Legal Basis for Processing (UK & EU GDPR)

We process personal data under the following lawful bases:

  • Contractual necessity – to provide services

  • Legitimate interests – business operations and improvement

  • Consent – where explicitly given (e.g. marketing emails)

  • Legal obligation – accounting, tax, and regulatory compliance

7. International Data Transfers

If you are located outside the UK, your data may be transferred to and processed in the UK.

Where required, we ensure appropriate safeguards are in place, including:

  • UK GDPR adequacy regulations

  • Standard contractual clauses (where applicable)

8. Data Sharing

We may share data with trusted third parties only where necessary, such as:

  • Website hosting providers

  • Email and communication services

  • Accounting or professional advisers

All third parties are required to process data securely and lawfully.

9. Data Retention

We retain personal data only for as long as necessary:

  • Enquiry data: up to 12 months

  • Client/project data: up to 6 years (legal/accounting requirements)

  • Marketing data: until consent is withdrawn

10. Your Data Protection Rights

Under UK GDPR (and EU GDPR where applicable), you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

To exercise your rights, contact: info@studio8creates.com

11. Cookies

Our website may use cookies to enhance functionality and analyse usage.

You can control cookies through your browser settings.

12. Data Security

We implement appropriate technical and organisational measures to protect your data, including secure systems and restricted access.

13. Complaints

If you are unhappy with how your data is handled, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: ico.org.uk

We encourage you to contact us first so we can resolve the issue.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.