Policies

Privacy notice

Last updated: 22 October 2026

Draft for adviser review

This policy is a working draft prepared for launch. It must be reviewed by a qualified adviser and updated with confirmed business details before the site goes live.

This notice explains how MADE Studio uses personal data. We are the data controller. Contact: hello@madestudio.uk.

What we collect

  • Enquiry details: name, email, optional company and phone, delivery postcode, project description and technical details.
  • Uploaded files: 3D models, photos, drawings and documents you send us. Photos may show your home or equipment, so please avoid including people or personal documents.
  • Order records: quotes, approvals, correspondence, payment status (not card details; those are handled by our payment provider) and delivery details.
  • Website usage: only if you accept analytics cookies. See our cookie policy.

Why we use it, and our lawful basis

  • To respond to your enquiry, quote, make and deliver your order (steps before entering into a contract, and performance of a contract).
  • To keep accounting and tax records (legal obligation).
  • To protect the website from spam and malicious files (legitimate interests).
  • To send studio news, only if you ticked the separate marketing box (consent, which you can withdraw at any time). Giving marketing consent is never a condition of getting a quote.

Who we share it with

Only service providers who help us run the studio, under contract: website and database hosting, file storage, transactional email, payment processing and couriers. We don't sell personal data.

Where it's stored and how it's protected

Enquiry data and files are stored in a managed database and private file storage with encryption in transit and at rest, access restricted to authorised studio staff, and short-lived download links. Some providers may process data outside the UK; where they do, we rely on UK adequacy regulations or approved contractual safeguards.

How long we keep it

  • Enquiries that don't become orders: deleted, with their files, 12 months after our last contact.
  • Orders: kept for 6 years after the end of the financial year, for tax and legal claims. Design files may be kept longer if you ask us to, for re-orders.
  • Marketing: until you unsubscribe.

Your rights

You can ask to access, correct, delete or restrict use of your data, object to processing, or ask for a copy in a portable format. Email us to make a request. You can also complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put things right first.