Privacy Policy

1. Introduction

TaleCrafters Ltd (“we”, “us”, “our”, or “the Company”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website at www.talecrafters.studio, use our services, or interact with us in any way.

This Privacy Policy is issued in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our website or services.

2. Data Controller Information

For the purposes of the UK GDPR, the Data Controller responsible for your personal data is:

• Company Name: TaleCrafters Ltd
• Company Number: 15121346
• Registered Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
• Email: hello@talecrafters.studio
• Website: www.talecrafters.studio

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your rights as a data subject, please contact us at hello@talecrafters.studio.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide Directly

Contact Form Submissions: When you fill out our contact form, we collect your name, email address, phone number (if provided), company name (if provided), and the content of your message.

Email Communications: When you email us directly, we collect your email address, name, and the content of your correspondence.

Service Inquiries: When you request a quote or inquire about our services, we collect any information you voluntarily provide, including project details, budget information, and business requirements.

Newsletter Subscription: If you subscribe to our newsletter or mailing list, we collect your email address and name.

3.2 Data Collected Automatically

Cookies and Tracking Technologies: We use cookies and similar technologies to collect information about your browsing behaviour. This includes session cookies (essential for website functionality), analytics cookies (to understand how visitors use our site), and preference cookies (to remember your settings). See Section 8 for full details on our cookie practices.

Log Data: Our servers automatically collect certain information when you visit our website, including your IP address, browser type and version, operating system, referring URL, pages visited, date and time of visit, and time spent on each page.

Device Information: We may collect information about the device you use to access our website, including device type, screen resolution, and unique device identifiers.

3.3 Data from Third Parties

We may receive personal data about you from third-party sources, including analytics providers (such as Google Analytics), social media platforms (when you interact with our social media pages), and referral partners or collaborators.

4. Legal Basis for Processing

Under the UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

4.1 Consent (Article 6(1)(a) UK GDPR)

We process your data based on your explicit consent for the following purposes: sending you marketing communications or newsletters, setting non-essential cookies on your device, and processing any special categories of data (if applicable). You have the right to withdraw your consent at any time by contacting us at hello@talecrafters.studio. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4.2 Contractual Necessity (Article 6(1)(b) UK GDPR)

We process your data when it is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes processing service inquiries and proposals, managing and delivering our creative services, invoicing and payment processing, and communicating about ongoing projects.

4.3 Legitimate Interests (Article 6(1)(f) UK GDPR)

We process your data based on our legitimate interests, provided these interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include improving and optimising our website and services, understanding how visitors use our website (via analytics), protecting our website against fraud and security threats, and responding to inquiries submitted through our contact form.

4.4 Legal Obligation (Article 6(1)(c) UK GDPR)

We process your data when required by law, including compliance with tax and accounting obligations under UK law, responding to lawful requests from public authorities, and fulfilling any other legal requirements under United Kingdom legislation.

5. How We Use Your Personal Data

We use your personal data for the following purposes: to respond to your contact form submissions and inquiries; to provide, maintain, and improve our website and services; to send you information about our services that you have requested; to send you marketing communications (only with your explicit consent); to analyse website traffic and user behaviour to improve user experience; to comply with legal and regulatory obligations; to protect our rights, property, and safety, and the rights, property, and safety of others; and to detect and prevent fraud or other illegal activities.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, only to the extent necessary:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf, including website hosting providers, email service providers, analytics providers (e.g. Google Analytics), cloud storage providers, and payment processors (for invoicing). All service providers are bound by data processing agreements in accordance with Article 28 of the UK GDPR.

6.2 Legal and Regulatory Authorities

We may disclose your personal data if required by law, regulation, legal process, or governmental request, including to HM Revenue & Customs (HMRC), courts or law enforcement agencies, and data protection authorities (the Information Commissioner’s Office).

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom. When such transfers occur, we ensure that appropriate safeguards are in place, in accordance with Articles 44-49 of the UK GDPR and guidance from the Information Commissioner’s Office.

These safeguards may include transfers to countries that the UK Secretary of State has deemed to provide an adequate level of data protection (Adequacy Regulations), use of the International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the EU Standard Contractual Clauses, and binding corporate rules or other approved transfer mechanisms.

For more information about the specific safeguards applied to international transfers of your data, please contact us at info@talecrafters.studio.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, to improve user experience, and to provide information to website operators.

8.2 Types of Cookies We Use

Strictly Necessary Cookies: These cookies are essential for the operation of our website. They enable core functionality such as security, network management, and account access. You cannot opt out of these cookies as the website cannot function without them.

Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use Google Analytics to analyse traffic patterns. These cookies are only set with your explicit consent.

Preference Cookies: These cookies allow our website to remember choices you have made (such as your cookie consent status) and provide enhanced, personalised features. These cookies are only set with your explicit consent.

8.3 Cookie Consent

In accordance with the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR), we obtain your explicit consent before setting any non-essential cookies. You can manage your cookie preferences at any time via our cookie consent banner or by contacting us at hello@talecrafters.studio. You can also control cookies through your browser settings.

8.4 How to Disable Cookies

You can set your browser to refuse all or some cookies, or to alert you when cookies are being set. Please note that disabling cookies may affect the functionality of certain parts of our website. For more information about how to manage cookies in your browser, visit www.allaboutcookies.org.

8.5 Specific Cookies We Use

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our specific retention periods are as follows:

• Contact form data: 12 months from the date of submission, unless a business relationship is established.
• Client project data: 6 years from the completion of the project, in accordance with UK limitation periods.
• Invoice and financial data: 6 years, as required by HMRC.
• Newsletter subscriber data: Until you unsubscribe or withdraw your consent.
• Analytics data:14 months, in accordance with our analytics provider’s settings.
• Cookie data: Varies by cookie type; see Section 8.5 for details.

When personal data is no longer required, we will securely delete or anonymise it.

10. Your Rights as a Data Subject

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of Access (Article 15): You have the right to obtain confirmation as to whether your personal data is being processed and, if so, to access that data along with information about the purposes of processing, categories of data, recipients, retention periods, and the source of the data.

Right to Rectification (Article 16): You have the right to request the correction of inaccurate personal data and to have incomplete data completed.

Right to Erasure (Article 17): You have the right to request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, when you withdraw consent, or when the data has been unlawfully processed.

Right to Restriction of Processing (Article 18): You have the right to request the restriction of processing of your personal data in certain circumstances, including when you contest the accuracy of the data or when the processing is unlawful.

Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.

Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. Where you object to processing for direct marketing, the data shall no longer be processed for that purpose.

Right Not to Be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

How to Exercise Your Rights: To exercise any of the above rights, please contact us at info@talecrafters.studio. We will respond to your request within one (1) month of receipt, in accordance with the UK GDPR. This period may be extended by two (2) further months where necessary, taking into account the complexity and number of requests. We may request proof of identity before processing your request, to ensure the security of your personal data.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, secure hosting with reputable providers, access controls and authentication mechanisms, regular security assessments and updates, and staff training on data protection practices.

While we take all reasonable precautions, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data.

12. Children’s Privacy

Our website and services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take immediate steps to delete that data. If you believe that a child under 13 has provided us with personal data, please contact us immediately at info@talecrafters.studio.

13. Third-Party Links

Our website may contain links to third-party websites, plugins, or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of every website you visit.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated “Last Updated” date. Material changes may be communicated to you via email or a prominent notice on our website. We encourage you to review this Privacy Policy periodically.

15. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority. In the United Kingdom, the competent authority is:

• Information Commissioner’s Office (ICO)
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Phone: 0303 123 1113
• Website: www.ico.org.uk
• Email: icocasework@ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first at hello@talecrafters.studio.

16. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• TaleCrafters Ltd
• Company Number: 15121346
• Email: hello@talecrafters.studio
• Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
• Website: www.talecrafters.studio