Introduction
Afer Studio ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or use our services.
We are based in London, UK and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
We may collect the following types of information:
- Contact Information: Name, email address, phone number, and company name when you fill out our contact form or book a call.
- Project Information: Details about your business needs and project requirements that you share with us.
- Technical Data: IP address, browser type, device information, and pages visited through cookies and analytics tools.
- Communication Data: Records of correspondence between us, including emails and meeting notes.
How We Use Your Information
We use your personal data to:
- Respond to your enquiries and provide requested information
- Deliver our services and manage our client relationships
- Send relevant updates about our services (only with your consent)
- Improve our website and services
- Comply with legal obligations
Legal Basis for Processing
We process your personal data based on:
- Consent: When you submit a contact form or subscribe to communications
- Contract: When necessary to deliver services you've engaged us for
- Legitimate Interests: For business operations, improving services, and protecting our business
- Legal Obligation: When required by law
Data Sharing
We do not sell your personal data. We may share your information with:
- Service Providers: Trusted third parties who help us operate our business (e.g., email services, analytics)
- Professional Advisers: Lawyers, accountants, and insurers when necessary
- Legal Requirements: When required by law or to protect our rights
All third parties are required to respect the security of your data and treat it in accordance with the law.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:
- Encrypted communications (SSL/TLS)
- Secure cloud infrastructure
- Access controls and authentication
- Regular security assessments
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.
- Enquiries: 2 years from last contact
- Client data: 7 years after project completion (for legal/accounting purposes)
- Marketing preferences: Until you withdraw consent
Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request limitation of processing
- Portability: Request transfer of your data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
To exercise any of these rights, please contact us at hello@aferstudio.com.
Cookies
Our website uses cookies to enhance your experience. We use:
- Essential Cookies: Required for the website to function
- Analytics Cookies: Help us understand how visitors use our site
You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read the privacy policies of any website you visit.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.