Privacy policy

Last updated 30 September 2026

1. Who we are

This policy explains how Tidemark Studio Ltd ("we", "us", "our") collects and uses personal information when you visit tidemarkstudio.online, contact us or work with us. We are the controller of this information, except in the situations described in section 4.

We handle personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What we collect

Information you send us

When you email us or send a brief, we receive whatever you choose to include. This is usually your name, email address, company, website, the services you're interested in, a rough budget and details of your goals. The brief form on our website does not send anything to a server. It opens your own email app with a pre-written message, and we only receive it if you send that email.

Information from working together

If you become a client, we keep business contact details for you and your colleagues, along with correspondence, contracts, invoices and payment records.

Technical information

Our hosting provider may automatically log basic technical data when you visit, such as your IP address, browser type, device and the pages you request. This is used to deliver the website and keep it secure.

3. How we use it

We only use personal information where we have a lawful basis to do so:

• Replying to enquiries and preparing proposals: our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
• Delivering our services and managing client relationships: performance of our contract with you.
• Keeping financial and business records: our legal obligations, including tax and accounting rules.
• Running and protecting the website: our legitimate interest in a secure, working website.
• Occasional updates about our services: sent to business contacts on the basis of our legitimate interests or, where the law requires it, your consent. You can opt out at any time.

We do not sell personal information, and we do not make automated decisions about you that have legal or similarly significant effects.

4. Client campaign data

When we run campaigns for a client, we may handle personal information on the client's behalf, for example customer lists uploaded to advertising platforms for audience matching, or conversion data used for measurement. In these cases the client is the controller and we act as a processor. We only use that data on the client's documented instructions and under a data processing agreement. If you are a customer of one of our clients, please contact that business about how your data is used.

5. Cookies and fonts

Our website does not set cookies and does not use analytics, advertising or tracking tools.

The website loads its typeface from Google Fonts. When your browser requests the font, Google receives your IP address and basic browser information. You can read Google's privacy policy for more detail.

If we add cookies or analytics in future, we will update this policy and ask for your consent where the law requires it.

6. Who we share it with

We only share personal information when it's necessary, with:

• service providers that support our business, such as email, hosting, cloud storage and accounting software, acting on our instructions;
• professional advisers such as accountants, lawyers and insurers;
• advertising and analytics platforms, where needed to deliver services a client has asked for;
• HM Revenue & Customs, regulators, courts or law enforcement, where the law requires it;
• a buyer or successor, if our business is sold or restructured.

7. International transfers

Some of our service providers may process personal information outside the UK. When that happens, we make sure the transfer is protected, for example by relying on UK adequacy regulations or by using the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

8. How long we keep it

• Enquiries that don't lead to work: up to 24 months from our last contact, then deleted.
• Client, contract and financial records: six years after the end of the financial year in which our work together ended, to meet legal and tax requirements.
• Marketing preferences: until you opt out. After that we keep a minimal record so we respect your choice.

9. Security

We use appropriate technical and organisational measures to protect personal information, including access controls, strong authentication on our business accounts and limiting access to people who need it. No method of sending information over the internet is completely secure, but we will act promptly if we become aware of a breach.

10. Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• have inaccurate or incomplete information corrected;
• have your information deleted;
• restrict how we use your information;
• object to how we use your information, including for direct marketing;
• have your information transferred to another organisation;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email hello@tidemarkstudio.online. We'll respond within one month. We may need to confirm your identity first. There is normally no charge.

11. Complaints

If you're unhappy with how we've handled your information, please contact us first so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated at the top.