Privacy Policy

1. Who We Are

Studio DISOUL is a London-based architectural staircase design, engineering and installation business.

For privacy-related questions or requests, you can contact us at contact@studiodisoul.co.uk.

2. Personal Information We Collect

The information we collect depends on how you use the website.

When you submit a contact form, including a contact form displayed within a blog article, we may collect your:

• Name
• Email address
• Telephone number, where provided
• Information contained in your project enquiry or message

When you submit the career application form, we may collect your:

• Name
• Email address
• Telephone number, where provided
• Area of expertise
• Information you provide about your experience, skills and career interests

CV files are not uploaded through the website. Applicants are asked to send their CV separately by email where required.

When you subscribe to our newsletter, we collect the email address you provide for the purpose of managing your newsletter subscription and sending relevant communications.

Depending on your consent choices, certain technical and usage information may also be processed by the analytics, advertising and security technologies described below.

3. How We Use Your Information

We use information submitted through the website to:

• Respond to enquiries and project requests
• Assess requests for estimates, consultations or other services
• Review career applications and communicate with applicants
• Manage newsletter subscriptions and send newsletter communications where appropriate
• Protect our forms and website from spam, abuse and automated submissions
• Understand website performance where Analytics consent has been provided
• Measure advertising and conversion performance where Marketing consent has been provided

4. Lawful Bases for Processing

The lawful basis we rely on depends on the purpose for which personal information is processed.

Information submitted in connection with an enquiry, quotation request, consultation or potential project may be processed where necessary to take steps at your request before entering into a contract and, in appropriate circumstances, for our legitimate interests in responding to genuine business enquiries and operating our business.

Career application information is processed for the purpose of receiving, reviewing and responding to applications and considering potential working relationships with Studio DISOUL.

Where consent is required for newsletter or other electronic marketing communications, we rely on that consent. You may withdraw your consent to such communications at any time.

Analytics and Marketing technologies that require consent are activated only after you have made the relevant choice through our cookie preferences.

5. Form Security and Spam Prevention

We use technical measures to protect our forms against spam, automated submissions and excessive requests.

These measures include server-side form validation, hidden anti-spam fields, request rate limiting and Cloudflare Turnstile security verification.

Turnstile performs a security check during form interaction and generates a verification token. That token is then validated by our server before a form submission is accepted.

Cloudflare may process technical information necessary to provide Turnstile and protect the website in accordance with its own privacy and data protection terms.

6. IP Addresses and Rate Limiting

We use the originating network address of a form request temporarily to help protect our forms against excessive or automated submissions.

Our application does not intentionally store the raw IP address as part of the submitted contact, career application or newsletter information.

For rate limiting, the address is transformed on the server into a one-way cryptographic identifier. That identifier is used to count requests during a limited rate-control window rather than storing the original address as the application's rate-limit key.

Infrastructure, hosting, network or security providers may nevertheless process network information, including IP addresses, where necessary to provide their services, maintain security or operate their systems.

7. Email Delivery and Newsletter Services

Contact enquiries and career applications submitted through the website are transmitted to Studio DISOUL by email.

We use Resend as an email infrastructure provider. Information necessary to prepare, send and deliver website-generated emails may therefore be processed through Resend's infrastructure.

Our newsletter functionality also uses Resend to manage subscriber email addresses and newsletter subscriber records.

A contact or career form is treated by the website as successfully submitted only after the email delivery service has accepted the message for sending. This acceptance does not by itself guarantee delivery to a recipient's inbox.

Newsletter subscriptions are separate from website cookie preferences. Choosing whether to allow Analytics or Marketing technologies in the cookie settings does not itself subscribe or unsubscribe you from the email newsletter.

8. Cookies, Local Storage and Consent

The website uses a consent preference system that allows you to choose whether Analytics and Marketing technologies may be used.

Your consent preference is stored in your browser so that the website can remember the selection you made.

Essential functionality and security measures remain available regardless of whether optional Analytics or Marketing categories are accepted.

You can review or change your website cookie and tracking preferences at any time using the Cookie Settings link in the website footer.

Cookie and tracking preferences are separate from consent or preferences relating to email newsletter communications.

9. Google Analytics

Where Analytics consent is provided, we use Google Analytics to understand how visitors interact with the website.

Analytics information may include pages viewed, navigation between pages, general website engagement and selected website interactions.

We may also measure events such as successful contact form submissions, contact call-to-action clicks, WhatsApp clicks and successful career application submissions.

Google Analytics tags are loaded by our consent-controlled implementation only after Analytics consent has been provided.

10. Google Ads and Marketing Measurement

Where Marketing consent is provided, Google Ads technologies may be used to measure advertising performance and website conversions.

For example, a successfully completed contact enquiry may be measured as a lead conversion where the required Marketing permission has been provided.

Marketing-related Google tags are loaded by our consent-controlled implementation only after Marketing consent has been provided.

11. Service Providers

We use selected service providers to operate, protect, communicate through and measure the website. Depending on how you use the website and the consent choices you make, these may include:

• Cloudflare — website and form security, including Turnstile verification
• Upstash — infrastructure used for request rate limiting
• Resend — transactional email delivery and newsletter subscriber management
• Google — Google Tag Manager, Google Analytics and Google Ads measurement

These providers may process information on our behalf, as independent controllers where applicable, or otherwise as described in their respective privacy notices and contractual terms.

12. International Data Transfers

Some technology providers used in connection with this website may process personal information in countries outside the United Kingdom.

Where a restricted international transfer of personal information takes place, Studio DISOUL and the relevant service provider are required to use an appropriate transfer mechanism, safeguard or other lawful basis for the transfer as required by applicable data protection law.

Further information about the locations in which individual providers process information and the safeguards they use can be found in their respective privacy notices, data processing terms and subprocessor information.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, considering applications, maintaining appropriate business records and meeting legal or regulatory obligations.

The period for which information is retained depends on factors including the nature of the information, whether an enquiry develops into a customer relationship, whether an application remains relevant to recruitment activity, whether a newsletter subscription remains active, and whether information must be retained for legal, regulatory, accounting or dispute-resolution purposes.

Where consent is withdrawn or a newsletter subscription is cancelled, information will be handled in accordance with applicable legal requirements and our operational record-keeping obligations.

14. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights in relation to your personal information, including the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain types of processing
• Withdraw consent where processing is based on consent
• Request data portability where the legal requirements are met

To exercise a privacy right, please contact us at contact@studiodisoul.co.uk.

15. Complaints

If you have concerns about how Studio DISOUL uses your personal information, please contact us first so that we have an opportunity to address your concern.

You may also have the right to make a complaint to the UK Information Commissioner's Office (ICO).

16. Changes to This Policy

We may update this Privacy Policy when our website, services, technology providers or data processing practices change.

The date shown at the top of this page indicates when this policy was most recently updated.

17. Contact

For questions about this Privacy Policy or the way Studio DISOUL handles personal information, please contact:

Studio DISOUL
Email: contact@studiodisoul.co.uk
Telephone: +44 7472 857434