Privacy Policy

Effective Date: 01/06/2025

Creatala Studio ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This policy outlines how we collect, use, and safeguard your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Creatala Studio is a trading name of Creatala, based at 29 Hinchley Way, Manchester, M27 6HB, United Kingdom
For any privacy-related inquiries, please contact us at: hello@creatalastudio.com

We are registered as a data controller with the Information Commissioner’s Office (ICO) in the UK.

2. Information We Collect

We may collect and process the following data:

  • Personal Identification Information: Name, email address, phone number, and other contact details.

  • Event Details: Information related to your event, such as dates, preferences, and venue details.

  • Transaction Data: Details of products or services you have purchased from us.

  • Technical Data: IP address, browser type, operating system, and browsing behaviour on our website.

  • Usage Data: Information about how you use our website, products, and services.

3. How We Collect Your Data

We collect personal data through the following channels:

1. Direct Interactions: You may provide personal data when you:

  • Fill out our contact forms

  • Submit a booking or enquiry

  • Subscribe to our newsletter

  • Communicate with us by email or phone

2. Automated Technologies: As you browse our website, we may automatically collect technical information such as:

  • IP address, browser type, and operating system

  • Clickstream data, page views, and session duration

  • This is done through cookies and other similar technologies

3. Third-Party Services: We may receive information from trusted external providers that support our business operations. These include:

  • Google Analytics (for understanding visitor behaviour)

  • Flodesk (for managing email communications)

  • Acuity Scheduling (for handling bookings)

  • Squarespace (as our website platform)

  • Embedded social content from Instagram and Pinterest, which may also collect engagement or interaction data

4. Legal Basis for Processing

Under Article 6 of UK GDPR, our legal bases are:

  • Consent (Article 6(1)(a)): for email newsletters, optional cookies

  • Contract (Article 6(1)(b)): to fulfil bookings or sales

  • Legal obligation (Article 6(1)(c)): to meet legal requirements (e.g. accounting)

  • Legitimate interest (Article 6(1)(f)): for running our business and improving our services

    We do not use automated decision-making or profiling.

5. How We Use Your Data

We use your data to:

  • Provide and manage our services.

  • Process transactions and deliver products or services.

  • Communicate with you, including responding to inquiries and sending newsletters.

  • Improve our website, products, and services.

  • To send newsletters and updates (with your consent).

  • To improve our website via analytics.

  • To comply with our legal or financial obligations.

6. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

  • For up to 6 years to meet legal/accounting requirements

  • Until you request deletion or withdraw consent (where applicable)

7. Sharing Your Data

We do not sell your personal data. However, we may share your data with trusted service providers. 

  • Service Providers: Such as payment processors, email marketing services, and analytics providers.

  • Legal Authorities: If required by law or to protect our legal rights.

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

Service Provider Purpose Privacy Policy
Squarespace Website platform View policy
Flodesk Email marketing View policy
Google Analytics Website analytics View policy
Acuity Scheduling Booking system View policy
Google Workspace Business email & cloud services View policy
Instagram & Pinterest Embedded content View policy

These providers may process data outside the UK, but only where appropriate safeguards (e.g. Standard Contractual Clauses) are in place.

7.1. International Data Transfers

Some of our external third parties are based outside the UK, so their processing of your personal data will involve a transfer of data outside the UK. We ensure that your personal data is protected by requiring all our third-party service providers to follow the same rules when processing your personal data.

8. Cookies

8.1. What Are Cookies?

Cookies are small text files placed on your device to store data. They help us improve your experience, measure site performance, and personalise content.

Cookies can be:

  • Session cookies: deleted when you close your browser

  • Persistent cookies: remain until they expire or are deleted

  • First-party cookies: set by us

  • Third-party cookies: set by services we embed or use (e.g. Google, Instagram)

8.2. What Cookies We Use

Essential Cookies

These are necessary for website functionality, including:

  • Page navigation

  • Booking forms (Acuity Scheduling)

  • Secure login (if applicable)

These cannot be disabled.

Analytics Cookies

We use Google Analytics to understand how visitors use our website (e.g. page views, session duration, location).
These cookies help us improve content and user experience.

Cookies used: _ga, _gid, _gat, etc.

Marketing & Email Cookies

If you subscribe to our newsletter (via Flodesk), cookies may be used to track engagement with our emails and opt-ins.

Social Media & Embedded Content Cookies

We embed content from Instagram and Pinterest, which may use cookies to:

  • Track engagement

  • Display recent posts

  • Personalise your experience

These cookies are set by the platforms and may collect data independently.

8.3. Managing Cookies

You can control cookie preferences via:

  • Our cookie banner (shown on first visit, and at the bottom of the website)

  • Your browser settings (e.g. block, delete, or restrict cookies)

Note: Disabling certain cookies may affect the functionality of the site.

8.4. Updates to This Policy

We may update this policy to reflect legal, technical, or business changes. The latest version will always be available on our site.

9. Marketing communications

You will receive marketing communications from us if you have:

  • Requested information from us or purchased goods or services from us; or

  • If you provided us with your details and ticked the box at the point of entry of your details for us to send you marketing communications, and

  • In each case, you have not opted out of receiving that marketing.

10. Your Data Protection Rights

Under data protection laws, you have rights including:

  • Access: You can request copies of your personal data.

  • Rectification: You can request the correction of inaccurate data.

  • Erasure: You can request the deletion of your personal data.

  • Restriction: You can request a restriction on processing.

  • Objection: You can object to processing.

  • Data Portability: You can request the transfer of your data to another organisation.

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint, so that we can try to resolve it for you.

The information we hold about you must be accurate and up to date. Please let us know if at any time your personal information or your preferences about processing your personal data change by emailing us at hello@creatalastudio.com

To exercise any of these rights, please contact us at hello@creatalastudio.com

11. Security & Data Breach

We take appropriate measures to secure your data. In the unlikely event of a data breach, we will notify affected users and the ICO where legally required.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites.

13. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.

14. Contact Us

If you have any questions about this policy or our privacy practices, please contact us at:

Email: hello@creatalastudio.com
Address: 29 Hinchley Way, Manchester, M27 6HB, United Kingdom

15. ICO Registration

Creatala Studio is registered with the Information Commissioner’s Office (ICO) in the UK. This confirms our commitment to lawful and transparent data processing. You can verify our registration at https://ico.org.uk.