Privacy Policy

Last updated: September 2026

WHO WE ARE AND DATA CONTROLLER

Kay Studio Co Ltd is a branding design agency registered in England and Wales.

Company Registration Number: 16921198 Registered Office: 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom Contact Email: hello@kaystudioco.com

APPLICABLE LEGAL FRAMEWORKS

We process personal data in compliance with:

• UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018

• EU General Data Protection Regulation (EU GDPR 2016/679)

• Swiss Federal Act on Data Protection (nDSG)

INFORMATION WE COLLECT

We collect personal data when you interact with our website or contact us:

• Identity and Contact Data: Name, email address, phone number, and company name.

• Project Data: Design briefs, brand details, and contract specifications.

• Technical Data: IP address, browser type, device information, and functional cookies.

LEGAL BASIS FOR PROCESSING

In accordance with GDPR Article 6, we process your personal data under the following legal bases:

• Contractual Necessity: To deliver design services, handle proposals, and issue invoices.

• Legitimate Interest: To respond to user inquiries, manage client relationships, and ensure site security.

• Legal Obligation: To comply with UK tax, accounting, and corporate laws.

• Consent: Where you have provided clear consent via our cookie banner or form submissions.

THIRD-PARTY SERVICE PROVIDERS AND INTERNATIONAL TRANSFERS

We do not sell your personal data. Data is processed using trusted third-party providers:

• Website Hosting and Forms: Squarespace, Inc. (USA)

• Business Operations: Google Workspace, Stripe, and Xero

Because Squarespace stores data on servers in the United States, international data transfers from the UK, EU, or Switzerland to the US are secured using International Data Transfer Agreements (IDTA) or Standard Contractual Clauses (SCCs).

DATA RETENTION

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or to comply with UK statutory accounting and tax record-keeping requirements (typically 6 years following the end of the financial year).

YOUR DATA SUBJECT RIGHTS (GDPR ARTICLE 13)

Under UK GDPR, EU GDPR, and Swiss nDSG, you hold the following explicit data subject rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.

• Right to Rectification: You have the right to request that we correct or complete inaccurate or incomplete data.

• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data where it is no longer required.

• Right to Data Portability: You have the right to request that we transfer your personal data to you or another provider in a structured, machine-readable format.

• Right to Restriction of Processing: You have the right to request that we restrict how we process your data.

• Right to Object: You have the right to object to our processing of your personal data based on legitimate interests.

To exercise any of these rights, please contact us by email at hello@kaystudioco.com.

SUPERVISORY AUTHORITIES AND COMPLAINTS

If you have concerns about how your data is handled, you have the right to lodge a complaint with the relevant data protection authority:

• United Kingdom: Information Commissioner's Office (ICO) via ico.org.uk

• European Union: Your local EU Member State Data Protection Authority

• Switzerland: Federal Data Protection and Information Commissioner (FADP/EDOEB) via edoeb.admin.ch