Privacy Policy

---

 Enchanted Bear Studio Privacy Policy

1. Introduction

Welcome to Enchanted Bear Studio. We are committed to protecting and respecting your privacy.

This policy ("Privacy Policy") explains how Enchanted Bear Studio ("we", "us", "our") collects, uses, shares, and protects your personal data when you visit our website (enchantedbearstudio.co.uk), interact with us, or use our marketing and graphic design services.

We are the data controller for the personal data we process, unless otherwise stated. Our contact details are provided in section 11.

2. What Information We Collect

We may collect and process the following data about you:

• Information You Give Us: This is data you provide by filling in forms on our website or by corresponding with us by phone, email, or otherwise. This includes:
  
  • Identity & Contact Data: Your name, email address, phone number, and company name.
  • Enquiry Data: Information you provide when you request a quote, submit a project brief, or contact us with a query.
  • Client Data: Information provided by you or your company to enable us to provide our graphic design and marketing services (e.g., brand assets, business details).
  • Marketing Data: Your preferences for receiving marketing from us.
• Information We Collect Automatically: When you visit our website, we may automatically collect:
  • Technical Data: Your Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
  • Usage Data: Information about how you use our website, such as which pages you visit and how long you spend on them. This is typically collected via cookies.

3. How We Use Your Information (and Our Lawful Basis)

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Purpose / ActivityType of DataLawful Basis for ProcessingTo respond to your enquiries and provide quotes.Identity, Contact, EnquiryLegitimate Interest (to respond to your query)To register you as a new client.Identity, ContactPerformance of a Contract with youTo provide our graphic design/marketing services.Identity, Contact, ClientPerformance of a Contract with youTo manage our relationship with you (e.g., invoicing, support).Identity, Contact, ClientPerformance of a Contract; Legal Obligation (e.g., for tax)To improve our website, services, and marketing.Technical, UsageLegitimate Interest (to improve our services)To send you marketing communications (e.g., our newsletter).Identity, Contact, MarketingConsent (which you can withdraw at any time)To comply with a legal or regulatory obligation.All relevant dataLegal Obligation

We will never sell your personal data to third parties.

4. Cookies

Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy [You must create a separate Cookie Policy or link to your cookie consent tool].

5. Data Sharing and Third Parties

We may have to share your personal data with the parties set out below:

• Professional Advisers: Such as our accountants, lawyers, and insurers.
• Service Providers: Who provide IT, system administration, and website hosting services.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic.
• Marketing Platforms: Such as Mailchimp (or similar), if you have consented to receive our newsletter.
• HM Revenue & Customs (HMRC): Or other authorities who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

6. Data Security

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.

While we do our best to protect your data, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure.

7. Data Retention

We will only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

For example, by law, we have to keep basic information about our clients (including Contact, Identity, and Financial data) for six years after they cease being clients for tax purposes.

8. International Transfers

Some of our external third-party providers are based outside the UK/EEA, so their processing of your personal data will involve a transfer of data. When we transfer your data, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses approved by the UK.

9. Your Data Protection Rights

Under UK data protection law, you have rights relating to your personal data:

• Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To request correction of any inaccurate or incomplete data.
• Right to Erasure: To ask us to delete your personal data (the "right to be forgotten") where there is no good reason for us continuing to process it.
• Right to Restrict Processing: To ask us to suspend the processing of your data.
• Right to Data Portability: To request the transfer of your data to you or a third party.
• Right to Object: To object to our processing of your data (e.g., for direct marketing).
• Right to Withdraw Consent: Where we rely on consent to process your data, you can withdraw this at any time.

To exercise any of these rights, please contact us using the details in section 11.

10. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Their website is www.ico.org.uk.

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

11. How to Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: Claire@enchantedbearstudio.co.uk

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page. We recommend you check this page regularly to stay informed.

Last Updated: [06/11/2025]