PRIVACY POLICY


Effective Date: 10th July 2026

 

Background

Studio Brown Ltd respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store, and share your personal information, and outlines your legal rights regarding your data. We will only process your personal data in line with applicable laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

About Us

Company Name: Studio Brown Ltd

Registered Address: 86-90 Paul Street, London, England EC2A 4NE

Data Protection Officer: Sharon Brown

Contact Details:

ICO Registration Number: [C1980609] – Awaiting confirmation

 

Scope of This Policy

This document covers all personal data we collect, hold, and process. It explains your rights and our obligations in relation to that data, whether you contact us directly, visit our website, or use our services.

 

What Is Personal Data?

Under data protection laws, personal data means any information that identifies you, or that could be used to identify you directly or indirectly. This includes obvious details such as your name and contact information, as well as other information like identification numbers, location data, and online identifiers.

Depending on our relationship with you, we may collect and process the following types of personal data:

  • Full name
  • Postal address
  • Email address
  • Telephone number
  • Business name (if applicable)
  • Job title / Profession
  • Payment and billing information

 

Your Rights

You have the following rights under data protection law, and we will always support you in exercising them:

✅ Right to be informed – You have the right to clear information about how we use your personal data; this policy provides that information, and you may contact us for further details.

✅ Right of access – You can request a copy of all personal data we hold about you.

✅ Right to rectification – You may ask us to correct or update any personal data that is inaccurate or incomplete.

✅ Right to erasure – You can request that we delete your personal data where there is no valid legal reason for us to keep it.

✅ Right to restrict processing – You may ask us to limit how we use your personal data in certain circumstances.

✅ Right to object – You can object to our processing of your personal data for specific purposes, such as direct marketing.

✅ Right to data portability – Where we process your data based on your consent or a contract, and processing is done by automated means, you can request a copy of your data to transfer to another service provider.

To exercise these rights, or if you have questions about how we use your data, please contact us using the details above. Please keep us updated if your personal details change so that our records remain accurate.

You can find more information about your rights from the Information Commissioner’s Office (ICO) or your local Citizens Advice Bureau. If you are unhappy with how we have handled your data, you may lodge a complaint with the ICO. We would appreciate the chance to address your concerns first, so please contact us directly in the first instance.

 

How We Use Your Personal Data

We only process your personal data where we have a lawful basis — this may be because:

  • Processing is necessary to perform a contract with you;
  • You have given your clear consent; or
  • It is in our legitimate business interests, and does not override your rights and freedoms.

We use your data for the following purposes:

  • Creating and managing your records and enquiries
  • Delivering our design, survey, and installation services
  • Customising our services to meet your specific requirements
  • Communicating with you, including responding to enquiries and sending updates
  • Complying with legal and regulatory obligations
  • Disclosing information only where required by law or court order

 

Website Cookies

Our website uses first-party cookies — set directly by us and used only by us — to improve your browsing experience and help us operate our services effectively.

We also use third-party cookies, including those from Google Analytics, which help us analyse how visitors use our site and improve our content.

If you use links to social media platforms such as Facebook or Instagram, these services may set their own cookies. We do not control these cookies, so please refer to the relevant platform’s own privacy and cookie policy for more information.

 

Data Retention

We do not keep your personal data longer than necessary for the purposes it was collected. Retention periods are set as follows:

Table

Data Type

Retention Period

Contact details

Minimum 1 year from the date we last provided services

Contracts and agreements

6 years from the date we last provided services (to cover potential legal claims)

Financial records

6 years from the date we last provided services (to comply with HMRC requirements)

Where no fixed period applies, we determine retention based on factors such as the purpose of processing, legal obligations, and potential legal claims. Once no longer required, data is securely deleted or anonymised.

 

Data Storage and Security

All your personal data is stored and processed within the United Kingdom and European Economic Area (EEA), ensuring it receives full protection under UK GDPR and equivalent standards.

We take the security of your data seriously and have implemented appropriate technical and organisational measures, including:

  • Password protection and encryption for all company devices
  • Secure, password-protected cloud databases
  • Up-to-date anti-virus software and firewalls on all systems
  • Secure, locked storage for physical documents and records

 

Who We Share Your Data With

We may share your data with trusted third-party service providers, agents, or subcontractors who help us deliver our services. We only share the minimum information required, and we have contracts in place to ensure your data remains secure and is not used for their own marketing purposes.

We will not share your data with third parties for their own direct marketing use unless we have your explicit permission.

We may disclose data if required by law, a court order, or a government or regulatory authority.

If we ever transfer your data outside the UK or EEA, we will take appropriate safeguards to ensure it remains protected to the same standards as required under UK data protection law.

 

Subject Access Requests

You may ask for details of the personal data we hold about you, or for a copy of that data — this is called a Subject Access Request.

  • Requests should be sent in writing to the contact details listed above.
  • We can provide a standard request form to make this easier, though you are not required to use it.
  • There is usually no fee for requests; however, we may charge a reasonable administrative cost if your request is repetitive, excessive, or unfounded.
  • We will respond within 1 month of receiving your request. For complex requests, we may extend this period by up to 2 months, and we will keep you informed of our progress.

 

Contact Us

If you have any questions about this policy, or about how we handle your personal data, please contact:

For the attention of: Sharon Brown

📧 Email: hello@studiobrownliving.co.uk

📞 Phone: 07719 767969

✉️ Post: 86-90 Paul Street, London, England EC2A 4NE

 

Changes to This Policy

We may update this policy occasionally — for example, to reflect changes in the law or our business practices. Any updates will be published at www.studiobrownliving.co.uk

 Please check this page regularly to stay informed of how we protect your information.