Credible Studio (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, share, and protect the personal data you provide via our website credible.studio and associated services. We operate from the UK, and our data handling complies with the UK GDPR and Data Protection Act 2018.
2.1 Personal Data You Provide
2.2 Automatically Collected Data
Website analytics: IP address, device and browser type, pages visited, referral sources, session duration, and geolocation at country‑level.
Cookies: essential cookies (for website functionality) and optional cookies (for analytics or marketing), with your consent.
We process your data for these main purposes:
Legal basis: performance of a contract or legitimate interest.
Data used: your contact and business information enables us to offer content strategy, quotes, and follow‑up.
Legal basis: your consent.
Data used: your name and email following your opt‑in.
Legal basis: legitimate interest.
Data used: anonymised analytics and cookies help us enhance site performance and content relevance.
Legal basis: compliance with UK law.
Data used: your contact details may be retained for audit and tax purposes as required by HMRC.
We do not sell your data. We may share limited personal data with:
Service providers (e.g. website host, email provider, analytics, CRM tools), all bound by data processing agreements.
Legal authorities if demanded by law (e.g., court order, regulatory request).
Professional advisors (like accountants or lawyers) when necessary to manage our business or legal compliance.
Your data is primarily stored in the UK. If any service provider stores data outside the UK/EEA, we ensure adequate safeguards are in place (e.g., standard contractual clauses) to protect your rights.
We keep your data based on:
Contact & service data: retained for up to 6 years after the end of our relationship to satisfy legal and accounting regulations.
Marketing data: until you unsubscribe or withdraw consent.
Analytical data: sessions and cookies typically expire after 12–24 months.
Under UK GDPR, you have the right to:
Access your personal data.
Correct inaccurate or incomplete data.
Erase your data in certain circumstances (“right to be forgotten”).
Restrict processing while a dispute is resolved.
Object to data processed on legitimate interest grounds or for marketing.
Port your data in a structured format where processing is based on consent or contract.
Withdraw consent at any time (but this won’t affect processing before withdrawal).
To exercise any of these rights, contact us (see Section 10). We aim to respond within one month.
We use cookies for functionality and analytics:
Essential cookies: necessary for website operation (e.g., session management).
Analytics cookies: collect anonymous usage stats.
Marketing cookies: used only if you opt-in, to send newsletters or promotions.
You’ll be prompted to consent when first visiting the site, with the option to change settings via a cookie banner or your browser.
We implement appropriate technical and organisational measures, including:
Encryption (HTTPS/TLS) for data transmission.
Secure servers and access controls.
Regular data backups.
Staff training and confidentiality measures.
No system is invulnerable, but we strive to keep your data safe.
Our services are not targeted to minors. We do not knowingly collect data from anyone under 16. If a minor provides us data, we will securely delete it once discovered.
We may update this policy occasionally (e.g. when introducing new services or due to legal changes). Changes will be marked at the top with a “Last updated” date. If we make significant changes, we may notify you by email (if subscribed).
Last updated: 22 June 2025
If you have questions, concerns, or wish to exercise your data subject rights, please email Credible Studio:
Email: hello@credible.studio
© 2025 | All rights reserved