top of page

Privacy Policy

Last updated: 12 April 2026

​

Spatula Studio ("Spatula", "we", "us", "our") respects your privacy and is committed to protecting your personal data.

​

This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, contact us, enquire about our services, join our mailing list, or otherwise interact with us.

 

1. Who we are

​

Spatula is an independent creative studio based in Bristol.

​

Data controller:
Spatula Studio
6 West St, St Philip's, Bristol, BS2 0BH
Email: studio@wearespatula.com
Phone: 07930332277

​

For any questions about this Privacy Policy or your personal data, contact:
[studio@wearespatula.com]

 

2. The personal data we collect

​

We may collect and use the following categories of personal data:

  • Identity data - such as your name

  • Contact data - such as your email address, phone number, business name and postal address

  • Enquiry data - such as the content of messages you send us through forms, email or other contact methods

  • Marketing data - such as your preferences in receiving marketing from us and your communication preferences

  • Technical data - such as IP address, browser type and version, time zone setting, device information and basic website usage data

  • Cookie data - where cookies or similar technologies are used on the website

  • Social media data - where you interact with us through social media platforms

 

We do not intentionally collect special category personal data through the website unless you choose to provide it to us.

​

3. How we collect your personal data

​

We collect personal data:

  • directly from you, when you contact us, fill in a form, sign up to receive updates, or work with us

  • automatically, through cookies and similar technologies when you use our website

  • from third parties where relevant, such as website hosting, analytics, mailing list platforms, or social media platforms

​

4. How we use your personal data and our lawful bases

​

Under UK data protection law, we must have a lawful basis for using your personal data. The lawful basis must be explained in the privacy notice. 

​

We may use your personal data for the following purposes:

​

To respond to enquiries and requests
Data used: identity, contact, enquiry data
Lawful basis: legitimate interests - to run and grow our studio and respond to potential clients and collaborators; or contract - where your request relates to possible work with us

​

To provide services and manage projects
Data used: identity, contact, project and billing-related data
Lawful basis: contract; and where required, compliance with a legal obligation

 

To send marketing emails or updates
Data used: identity, contact, marketing preference data
Lawful basis: consent, where required
We will only send marketing emails to individuals where we have a lawful basis to do so, and where PECR requires consent, we will seek that consent. 

 

To improve our website, user experience and communications
Data used: technical data, cookie data, usage data
Lawful basis: consent for non-essential cookies where required; legitimate interests for limited essential site administration; and any further use in line with applicable PECR and UK GDPR requirements. 

 

To keep records, prevent misuse, and protect the website and business
Data used: technical data, enquiry data and related records
Lawful basis: legitimate interests; and legal obligation where applicable

​

5. Marketing

 

If you subscribe to our mailing list or opt in to receive updates from us, we may send you marketing communications about our work, services, projects or opportunities.

 

You can unsubscribe at any time by:

​

For email or text marketing to individuals, PECR generally requires specific consent, subject to limited exceptions. 


We use WIX Email Marketing to manage and send email communications. When you sign up, your information is processed by that provider on our behalf.

​

6. Cookies and similar technologies

​

Our website may use cookies and similar technologies to make the site work, understand usage, improve performance, and support embedded content or marketing activity.

​

Some cookies are strictly necessary for the website to function. Others, including analytics, advertising, personalisation or certain embedded third-party tools, may require your consent before they are placed on your device. PECR governs cookies and similar technologies, and the ICO states that non-essential cookies generally require consent. 

​

You can control cookies through our cookie banner or your browser settings.

If you use analytics or embedded tools, it is better to include a separate Cookie Policy or cookie table listing:

  • cookie name

  • provider

  • purpose

  • duration

  • whether it is strictly necessary

 

7. Sharing your personal data

​

We may share your personal data with trusted service providers where necessary to run the website and operate our business, for example:

  • website hosting and website platform providers

  • email and communications providers

  • mailing list or CRM providers

  • analytics providers

  • professional advisers, such as accountants, legal advisers or insurers

  • regulators or law enforcement where required by law

 

We require third-party providers acting on our behalf to respect the security of your personal data and to process it only on appropriate instructions.

​

8. International transfers

 

Some of our third-party service providers may process personal data outside the UK. Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place in line with UK data protection law.

​

If you know your providers transfer data internationally, keep this section in. If everything stays in the UK, you can narrow it.

 

9. How long we keep your personal data

​

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, insurance or reporting requirements.

​

Typical retention periods may include:

  • general enquiries - up to 24 months after the last meaningful contact

  • client and project records - up to 6 years after the end of the relationship, where relevant for contractual or legal reasons

  • marketing records - until you unsubscribe or withdraw consent, plus a limited suppression record so we can respect your preference

  • technical and analytics data - in line with our cookie and analytics settings

 

You should adjust these periods to match what you actually do.

​

10. Your data protection rights

​

Under UK data protection law, individuals have rights including:

  • the right to be informed

  • the right of access

  • the right to rectification

  • the right to erasure

  • the right to restrict processing

  • the right to object

  • the right to data portability

  • rights related to automated decision-making, where applicable

 

You can exercise your rights by contacting us at [studio@wearespatula.com].

 

11. Complaints

 

If you have concerns about how we use your personal data, please contact us first and we will try to resolve the issue.

​

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection matters. The ICO explains that people have the right to clear privacy information and to raise concerns with it if needed. 

​

12. Data security

​​

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet or electronic storage is completely secure.

​

13. Third-party links

​

Our website may contain links to third-party websites or platforms, including social media. If you follow those links, their own privacy policies and terms will apply. Your site currently links to LinkedIn and Instagram. 

​

14. Children

​

Our website and services are not directed at children, and we do not knowingly collect personal data from children through the website.
 

15. Changes to this policy

​

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the "Last updated" date will be revised.

​

16. Media consent forms and participant information

​

If you take part in photography, filming, interviews, recordings or other media activity connected with Spatula, we may collect personal data through a consent form or related communications. This may include your name, contact details, confirmation of consent, age or age confirmation where relevant, and information about your participation.

​

We use this information to manage permissions, document consent, organise production activity, and keep a record of how material may be used. Depending on the circumstances, our lawful basis may be consent, legitimate interests, or both. Where we rely on consent, you may withdraw it at any time, although this may not affect uses already made before withdrawal where that use was lawful at the time.

​

We keep consent records only for as long as reasonably necessary for evidential, administrative and production purposes. If you have any questions about participant data or would like to withdraw consent, please contact studio@wearespatula.com.

bottom of page