Privacy Policy
Studio Imogen Ltd | Interior Design
1. Introduction
Studio Imogen Ltd ("Studio Imogen", "we", "our" or "us") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, submit an enquiry, subscribe to our mailing list, enquire about or engage our services, work with us as a client, supplier or contractor, interact with us through social media, or otherwise provide us with personal information.
We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
This policy explains what personal data we collect, why we collect it, how we use it, who we may share it with, how long we keep it and the rights you have in relation to your personal data.
2. Data Controller
Studio Imogen Ltd is the data controller responsible for the personal data we process in connection with our website and services.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details provided at the end of this policy.
3. Personal Data We Collect
We may collect and process the following categories of personal data, depending on how you interact with us.
Identity and contact information
This may include your name, postal address, email address and telephone number.
Project and professional information
If you enquire about or engage our services, this may include your company name, role, property or project address, project requirements, design brief, preferences and other information relevant to providing our services.
Enquiry and communications information
If you contact us through our website contact form, by email, telephone, social media or another communication channel, we may collect the information you provide, including your name, contact details, project information and the contents of your enquiry or correspondence.
We use Google Workspace/Gmail for business email and communications. Information contained in emails and attachments may therefore be processed and stored through Google's services.
Financial and transaction information
Where you engage our services, we may collect information necessary for invoicing, payments, accounting and financial administration, including billing details and records of transactions.
We use FreeAgent to assist with our accounting, invoicing and financial administration. Personal data provided for these purposes may therefore be processed through FreeAgent.
Website and technical information
When you visit our website, we may collect technical information such as your IP address, browser type, device type, operating system, pages visited, referring website and information about how you interact with our website.
Our website is hosted and operated using Squarespace.
Website analytics
We use Google Analytics to help us understand how visitors use our website. This may include information such as pages viewed, traffic sources, approximate location, device information and interactions with the website.
Google Analytics is used in accordance with our cookie and consent settings where consent is required.
Newsletter and marketing information
If you subscribe to our newsletter, we may collect your name, email address, subscription preferences and information about your interactions with our marketing communications, such as whether an email has been opened or links have been clicked.
We use Squarespace Email Campaigns to manage our mailing list and send newsletters and marketing communications.
Social media
We maintain a presence on Instagram and may receive personal information when you interact with us through our Instagram account, for example when you send us a direct message, comment on a post or otherwise communicate with us.
Instagram is operated by Meta. Information you provide directly through Instagram is also subject to Meta's own privacy policies and terms.
Images and project information
Where relevant to our services, we may process photographs, plans, drawings and other visual or project-related information provided by you or created in connection with your project.
We aim to collect only personal data that is reasonably necessary for the purposes described in this policy.
Special category data
We do not routinely collect special category personal data. If you voluntarily provide information of this nature, for example information relating to accessibility requirements that is relevant to a project, we will only process it where permitted by applicable data protection law and where an appropriate additional condition for processing special category data applies.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to enquiries submitted through our website, including contact forms.
To communicate with you about your enquiry or project.
To provide, manage and administer our interior design services.
To prepare quotations, proposals, contracts and project documentation.
To manage relationships with clients, suppliers, contractors and other professional contacts.
To process invoices and payments and maintain appropriate financial records.
To send newsletters, updates and marketing communications where we are permitted to do so.
To administer and improve our website and services.
To understand how visitors use our website through analytics.
To maintain the security of our website, systems and business.
To prevent and detect fraud, misuse or other unlawful activity.
To comply with legal, regulatory, accounting and professional obligations.
To establish, exercise or defend our legal rights.
To maintain appropriate business records.
5. Lawful Bases for Processing
Under the UK GDPR, we must have a lawful basis for processing your personal data. Depending on the circumstances, we may rely on one or more of the following:
Performance of a contract
We may process your personal data where it is necessary to enter into or perform a contract with you. This includes providing our interior design services, managing your project, communicating with you and administering payments.
Taking steps at your request before entering into a contract
Where you contact us to enquire about our services, we may process your personal data where necessary to respond to your enquiry and take steps at your request before entering into a contract.
Legal obligation
We may process your personal data where necessary to comply with a legal or regulatory obligation, including accounting, tax and record-keeping requirements.
Legitimate interests
We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include operating and managing our business, communicating with clients and professional contacts, managing business relationships, improving our website and services, maintaining security, preventing fraud and protecting our legal rights.
Consent
We may rely on your consent where required, including for certain marketing communications and non-essential cookies, such as Google Analytics cookies.
Where we rely on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew your consent.
6. Marketing
If you choose to subscribe to our newsletter, we may use your name and email address to send you newsletters, updates, information about our services, new projects and other communications that we believe may be relevant to you.
We use Squarespace Email Campaigns to manage our mailing list and distribute these communications.
Where required by law, we will only send electronic direct marketing where you have provided consent or another lawful basis that permits us to do so.
You can unsubscribe from marketing communications at any time by following the unsubscribe link included in our emails or by contacting us directly.
Opting out of marketing communications will not affect communications that are necessary in connection with services we are providing to you or an existing business relationship.
7. Cookies and Similar Technologies
Our website is hosted using Squarespace and uses cookies and similar technologies.
Some cookies are strictly necessary for the website to function. Other cookies, including analytics and certain functionality or marketing cookies, are non-essential and may require your consent before they are placed on your device.
We use Google Analytics to understand how visitors use our website and to help us improve our website and services.
Our cookie banner allows you to choose whether to accept non-essential cookies. You can change your cookie preferences at any time through the cookie settings available on our website.
The categories of cookies we may use include:
Strictly necessary cookies – required for the website to function.
Analytics cookies – used to understand website traffic and how visitors use our website, including Google Analytics.
Preference and functionality cookies – used where necessary to remember certain choices or improve website functionality.
Marketing cookies – used where applicable to support marketing or advertising activity.
For further information about the specific cookies used on our website, their purposes, duration and how you can manage them, please see our Cookie Policy.
8. Third-Party Services and Who We Share Your Personal Data With
We use a number of third-party services to help us operate our website and business.
Squarespace
Our website is hosted and operated using Squarespace. Squarespace may process information relating to visitors and website activity in providing its services to us.
We also use Squarespace Email Campaigns to manage our newsletter mailing list and send marketing communications.
We use Google Workspace/Gmail for business email and communications. Information contained in emails, attachments and other communications may therefore be processed through Google's services.
We also use Google Analytics to collect and analyse information about how visitors use our website. Google may process this information on our behalf, subject to the applicable Google Analytics and data protection arrangements.
FreeAgent
We use FreeAgent for accounting, invoicing and financial administration. Personal data relating to clients, suppliers and transactions may therefore be processed through FreeAgent.
We use Instagram to communicate with our audience and share information about Studio Imogen and our work.
If you contact us through Instagram, we may process information contained in your messages or other interactions with our account. Instagram is operated by Meta, and your use of Instagram is also subject to Meta's own privacy policies and terms.
Other service providers and professional advisers
We may also share personal data with trusted third parties where necessary for business operations, including:
Website, hosting and technology providers.
Accounting and payment providers.
Professional advisers such as accountants, lawyers and insurers.
Suppliers, contractors, consultants and other professionals involved in delivering our services.
IT and communications providers.
Legal and regulatory bodies where required.
We will only share personal data where there is a legitimate reason to do so and will aim to ensure that third parties only receive information that is reasonably necessary for the relevant purpose.
9. International Transfers
Some of the third-party providers we use may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your personal data receives an appropriate level of protection in accordance with applicable data protection legislation.
This may include relying on an adequacy decision or appropriate contractual safeguards where required.
10. How Long We Keep Your Personal Data
We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual or reporting requirements.
The length of time we retain information will depend on the type of information and the reason for which we hold it.
For example, information relating to completed projects may be retained for an appropriate period to maintain business and project records, while financial and accounting records will generally be retained for the period required by applicable law.
Marketing information will generally be retained until you unsubscribe or withdraw your consent, unless we have another lawful reason to retain it.
When personal data is no longer required, we will securely delete it or anonymise it where appropriate.
11. Data Security
We take reasonable and appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration or disclosure.
Our third-party service providers also maintain their own security measures and data protection arrangements.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
12. Your Rights
Under applicable data protection law, you may have the following rights in relation to your personal data:
The right to be informed about how your personal data is collected and used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification of inaccurate or incomplete personal data.
The right to erasure of your personal data in certain circumstances.
The right to restrict processing of your personal data in certain circumstances.
The right to object to certain types of processing, including direct marketing.
The right to data portability in certain circumstances.
The right to withdraw consent where we rely on consent as our lawful basis for processing.
These rights are not absolute and may be subject to certain legal conditions and exemptions.
If you wish to exercise any of these rights, please contact us using the details provided below.
We may need to request additional information from you to verify your identity before responding to a request.
We will normally respond to a valid request within one month, subject to any extensions permitted by applicable law.
13. Third-Party Websites
Our website and social media profiles may contain links to third-party websites, including suppliers, manufacturers, social media platforms and other websites that may be of interest to you.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend that you review the privacy policies of any third-party websites you visit.
14. Children's Privacy
Our website and services are not directed at children, and we do not knowingly collect personal data from children through our website.
If you believe that a child has provided us with personal data, please contact us so that we can take appropriate steps to address the situation.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or applicable legal requirements.
The most recent version will always be published on our website, together with the date it was last updated.
16. Contact Us
If you have any questions about this Privacy Policy, how we process your personal data or wish to exercise your data protection rights, please contact Studio Imogen Ltd using the details below.
Studio Imogen Ltd
Registered in England and Wales
Company number: 16380923
Email: hello@studio-imogen.com
Last updated: 29 August 2026