Global Business✦London✦New York✦San Francisco✦Edinburgh✦Supporting organisations globally across transformation, growth, customer experience and AI-enabled change✦
Global Business✦London✦New York✦San Francisco✦Edinburgh✦Supporting organisations globally across transformation, growth, customer experience and AI-enabled change✦

Legal

Privacy Policy

Last updated: [REPLACE: DATE]

This Privacy Policy explains how EMM Studio ("we", "us", "our") collects, uses and protects your personal data when you visit emmstudio.ai or engage with our services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is [REPLACE: REGISTERED COMPANY NAME], registered at [REPLACE: REGISTERED ADDRESS]. For privacy enquiries, contact [REPLACE: PRIVACY EMAIL].

2. Data We Collect

  • Contact data — name, email, company, and message content when you contact us.
  • Usage data — pages visited, referrer, device/browser type, approximate location, collected via Google Analytics 4 (only if you consent).
  • Technical data — IP address (anonymised), cookies and similar technologies (see our Cookie Policy).

3. Lawful Basis

  • Consent — analytics cookies and marketing communications.
  • Legitimate interests — responding to enquiries, improving services, securing our website.
  • Contract — to deliver services you have engaged us for.
  • Legal obligation — accounting, tax, and regulatory record-keeping.

4. How We Use Your Data

  • To respond to enquiries and deliver services.
  • To understand how the site is used (only with analytics consent).
  • To meet legal and regulatory obligations.

5. Sharing

We share personal data only with processors who help us run the business — including [REPLACE: e.g., Google Analytics, email provider, hosting provider]. Each operates under a data processing agreement. We do not sell personal data.

6. International Transfers

Where processors are based outside the UK/EEA, we rely on UK adequacy decisions or Standard Contractual Clauses with appropriate supplementary measures.

7. Retention

We retain personal data only for as long as necessary, or as required by law. Enquiry emails are typically retained for [REPLACE: e.g., 24 months].

8. Your Rights

You have the right to access, rectify, erase, restrict, port or object to processing of your personal data, and to withdraw consent at any time. To exercise these rights, email [REPLACE: PRIVACY EMAIL]. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

9. Security

We use technical and organisational measures to protect your data, including TLS encryption, access controls and reputable infrastructure providers.

10. Changes

We may update this policy from time to time. Material changes will be highlighted on this page.