Studio Botez - Digital products for humans

Last updated 3rd August 2026

Applies To Studio Botez websites, products and managed services
Legislation UK GDPR, Data Protection Act 2018, PECR (Privacy & Electronic Communications Regulations)

1. Introduction

Studio Botez Ltd ('we','us','our') is a UK cloud-based software company developing proprietary digital products and providing managed cloud services. Protecting personal information is fundamental to the way we operate. This Privacy Policy explains what information we collect, why we collect it, how we use it, how long we retain it, when we share it and the rights available to individuals under applicable data protection legislation.

2. Who We Are

For information relating to our own business activities, Studio Botez Ltd acts as a Data Controller. When we process information on behalf of customers through our cloud services we generally act as a Data Processor under written contractual terms and, where appropriate, a Data Processing Agreement (DPA). We are registered with the Information Commissioner's Office (ICO).

3. Scope

This Policy applies to visitors to our websites, prospective customers, customers, suppliers, partners, individuals contacting us, subscribers to communications and users of Studio Botez managed services.

4. Information We Collect

Information may include names, job titles, organisation details, postal and email addresses, telephone numbers, account credentials, billing information, correspondence, support enquiries, technical information such as IP address, browser, operating system, cookies, diagnostics and usage information. We only collect information necessary for legitimate business purposes.

5. How We Collect Information

Information is collected directly from you, through forms, emails, telephone conversations, support requests, customer onboarding, use of our websites and products, cookies and trusted third-party service providers where appropriate.

6. How We Use Information

We use personal information to provide services, administer customer accounts, deliver support, fulfil contractual obligations, improve products, maintain platform security, communicate important service information, process payments, comply with legal obligations and protect our legitimate business interests.

7. Lawful Bases

Processing is carried out under one or more lawful bases including performance of a contract, compliance with legal obligations, legitimate interests or consent where required.

8. Customer Data

Customer content and data always remain the property of the customer. Studio Botez does not claim ownership of customer data. Where we host or process customer information, we do so only in accordance with documented customer instructions, contractual commitments and applicable law.

9. Sharing Information

Personal information is shared only where necessary with carefully selected service providers, payment processors, professional advisers, regulators or law enforcement where legally required. We never sell personal information.

10. International Transfers

Our standard operational model is to host UK customer data within secure UK-based infrastructure. Where personal information is processed by an approved third-party provider outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with UK data protection legislation. These safeguards may include an adequacy decision, the UK International Data Transfer Agreement (IDTA), or another legally recognised transfer mechanism.

We carefully select and review third-party providers to help ensure they maintain appropriate technical and organisational security measures. International transfers are undertaken only where necessary for the delivery of our services or the operation of our business and are subject to ongoing review.

11. Data Retention

Information is retained only for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations, resolve disputes and protect legal rights. Retention periods are reviewed regularly.

12. Security

We maintain appropriate technical and organisational measures including secure hosting, encryption where appropriate, access controls, authentication, backups, monitoring, patch management and regular review of security procedures. While no system can guarantee absolute security, we continually seek to protect the confidentiality, integrity and availability of information.

13. Marketing

We will only send marketing communications where permitted by law or where you have consented. You may unsubscribe at any time.

14. Cookies

Our websites use cookies and similar technologies to improve functionality, security and user experience. Please refer to our Cookie Policy for detailed information.

15. Your Rights

You may request access to your information, correction of inaccurate information, erasure where applicable, restriction or objection to processing, portability of information and withdrawal of consent where consent is relied upon. You also have the right to complain to the Information Commissioner's Office.

16. Third-Party Websites

Our websites may contain links to third-party websites. We are not responsible for the privacy practices of external websites.

17. Our Commitment

We are committed to processing information responsibly, lawfully and transparently. We regularly review our governance documentation, policies and technical measures to ensure they remain aligned with legislation, recognised standards and industry best practice.

In addition, we regularly review our suppliers, processing arrangements and governance documentation to help ensure our data handling practices continue to meet applicable legislation, recognised standards and industry best practice.

18. Contact

Questions regarding this Privacy Policy or the way we process personal information should be directed to Studio Botez Ltd using the contact details published on our website.

19. Changes

We may update this Privacy Policy from time to time. The latest version will always be published on our website together with its effective date.