Privacy Policy

In order for us to operate our business and provide our services to you, it is sometimes necessary for us to collect or process information about you. In general terms, this information takes one or more of the following forms:

• Information that you provide to us directly, such as when you complete an online form, start a chat or send us a message via our website;
• Information that is automatically sent to us by your computer’s internet browser when you visit our website, such as your computer’s technical address (IP address) or information about which internet browser you are using;
• Information about how you use our website, such as which pages you visit and how frequently you visit the site.

This policy sets out what information we collect, how that data is used and how it is protected.

Our commitment to data privacy

We are fully committed to maintaining the privacy of any personal data that you provide to us. We commit to ensuring that such data is held securely, used appropriately and only retained for as long as is necessary.

Our systems and services are designed with privacy in mind, and we operate a data minimisation principle wherever possible: we only ever ask you for the minimum amount of information required to provide our services efficiently. We comply with applicable data protection regulations, in particular the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

Who we are

In terms of your use of this website, we, Unstuck Studio Ltd, act as Data Controller. Should you have any questions or concerns about the data we hold about you, contact us using the details below.

• Data Controller: Unstuck Studio Ltd
• Information Commissioner’s Office (ICO) registration: ZB370322
• Correspondence address: The Guild, King Street, Wilton, Salisbury SP2 0RS
• Email: hello@unstuckstudio.co.uk
• Telephone: 01722 782 873

What we mean by personal data

Personal data is any information that allows us to identify you personally: your name, email address, phone number, postal address and so on. We will always seek your explicit consent before collecting this information from you, although consent may not be the only legal basis on which we process it. Other information, such as your IP address or broad geographical location, does not generally allow us to identify you directly, but we cover it here too.

Who we share data with

We operate on a strict need to know basis for all data we work with, and particularly for personal data. The only people and organisations granted access to personal data are:

• Employees of Unstuck Studio who provide design, marketing or support services;
• Our web hosting supplier, WP Engine, which provides the server infrastructure this website runs on (wpengine.com/legal/privacy);
• Our cloud storage and productivity suppliers, Amazon Web Services (secure backup, aws.amazon.com/privacy) and Google (Google Workspace for email and document storage, policies.google.com/privacy);
• Our email marketing provider, Campaign Monitor, used to send the Chorus newsletter to people who have subscribed (campaignmonitor.com/trust);
• Chatbase, which provides the chat assistant on this website and processes the messages you type into it (chatbase.co/legal/privacy);
• CleanTalk, which checks form submissions for spam (cleantalk.org/publicoffer), and Google, for website analytics and the services listed below.

We do not sell your data and we do not share it with anyone else unless the law requires it.

How your data is protected

• Access control: access to personal data is strictly limited in line with the policy above. Access is controlled by individual user accounts with a strong password policy.
• Dedicated security software: we operate security scanning and access control software on all of our websites. This limits login attempts, blocks potentially malicious attempts to access our services and regularly performs full file system scans.
• Encryption: this website is secured with SSL, so all traffic to and from our servers is encrypted, including our own administrative access.
• ICO registration: we are registered with the Information Commissioner’s Office, the UK’s data regulator.

Your rights

Where you have directly provided personal information to us, for example by completing a form or contacting us, you have the right to:

• Obtain confirmation of whether we hold data about you;
• Receive a copy of the data we hold or process about you, including the right for it to be transferred to another data controller;
• Withdraw your consent at any time, even if you have previously consented to us processing your data;
• Require us to correct incomplete or incorrect information;
• Require us to erase the data held about you (the right to be forgotten).

Where we collect data automatically, for example from your browser or via cookies, you have the right to object to the legal basis on which we collect it, to request that further processing is paused while your objection is considered, and to complain to the Information Commissioner’s Office (ico.org.uk). In most circumstances you can exercise these rights without paying a fee.

Types of data collected

Website forms. When you complete a form on our website (contact, request a quote, newsletter sign-up, website feedback or client welcome), we ask for personal information such as your name, email address and other contact details so that we can respond to your request or provide the service you have asked for. Form submissions are checked for spam by CleanTalk, then emailed to us and may be stored in our email system. If you do not submit a form, no data is collected in this regard.

Chat. If you use the chat assistant, the messages you type are processed by Chatbase to generate a reply. Please do not share sensitive personal information in the chat.

Technical data (such as IP address). When you visit our website, our systems log a record of your visit in server logs, which typically include the IP address associated with your device and the browser type and version you are using. Server logs are common practice and are used to monitor technical resources and server activity, and to detect and prevent malicious or fraudulent activity. IP addresses do not in themselves allow us to identify you as an individual, and we do not use server logs to attempt to identify individuals. We therefore do not consider server log data to be personal data and do not seek your consent to collect it.

Cookies and similar technologies

Cookies, web beacons and similar technologies all perform similar functions: they are small data files placed on your device that allow a website to tell when you have visited a page or performed an action. They help us understand how the site is used and are sometimes essential to providing online functionality.

• Session cookies expire at the end of your browser session.
• Persistent cookies are stored on your device between sessions, allowing a site to remember your preferences.
• First party cookies are set by the site you are visiting; third party cookies are set by a different site.

Most browsers (Chrome, Safari, Edge, Firefox and others) let you allow or block cookies and remove any that have already been set. Your browser’s Help section explains how. See also our Cookies page.

Website analytics

We use Google Analytics to understand what people look at on our website. Information about your visit (pages viewed, time on site and so on) is sent to Google Analytics in an anonymised form, with IP addresses truncated, and there is no way to identify individuals from the data.

Other third party services

• Google Fonts: we may use Google’s web fonts so that content displays consistently across devices and browsers.
• CleanTalk: our forms use the CleanTalk anti-spam service to prevent abuse by automated programs. It analyses the submission and technical data such as IP address to do this.
• YouTube: our contact page embeds a video hosted by YouTube (Google), which may set cookies when the video loads.
• Instagram: our contact page shows recent posts from our Instagram account, loaded from Instagram (Meta), which may set cookies.

Each of these services involves your browser connecting to the provider’s servers and may result in cookies being placed on your device. Their privacy policies apply to that data.

Future updates

This policy was last updated on 9 October 2026. We may revise it from time to time, so please return to this page to see any updates.