Privacy policy
Last updated: 15.06.26
1
This Privacy Policy explains how Sister Studio ("I", "me", "my") collects, uses, and protects your personal data when you visit [sisterstudio.co.uk] (the "Site"). It applies to data I process as the data controller under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who I am
2
Sister Studio is a freelance brand design and content creation business operated by Lissy Evans, based in Bath, United Kingdom.
For any privacy-related questions or requests, contact me at: hello@sisterstudio.co.uk
ICO registration number: pending
What data I collect
3
I collect personal data in the following ways:
Information you give me directly. When you complete the contact form or email me, I collect your name, email address, and any information you choose to include in your message (for example, details about your project or business).
Information collected automatically. When you visit the Site, certain data is collected through cookies and similar technologies, including your IP address, browser type, device information, the pages you view, and how you arrived at the Site. This is used for analytics and to keep the Site functioning.
How I use your data
4
I use the personal data I collect to:
Respond to your enquiries and communicate with you about potential or ongoing work.
Provide, maintain, and improve the Site.
Understand how visitors use the Site through aggregated analytics.
Comply with my legal obligations.
I do not sell your personal data, and I do not use it for automated decision-making or profiling.
Legal basis for processing
5
I rely on the following legal bases under UK GDPR:
Legitimate interests — to respond to enquiries, run my business, and understand Site usage in a way that does not override your rights.
Consent — for non-essential cookies (such as analytics), which are only set after you agree via the cookie banner. You can withdraw consent at any time.
Legal obligation — where I am required to retain or disclose data by law.
Third parties and data processors
6
I use the following services, which may process personal data on my behalf:
Squarespace — hosts the Site and processes data including form submissions and basic usage data. See Squarespace's own privacy policy for details.
Google Analytics — provides aggregated statistics about Site usage. [Remove this line if you do not use analytics.]
ImprovMX and Google — handles email sent to and from my business address.
Embedded content (e.g. Instagram) — some pages include content from third-party platforms, which may set their own cookies or collect data when you interact with them.
These providers may store data outside the UK. Where that happens, appropriate safeguards (such as standard contractual clauses) are in place.
Cookies
7
The Site uses cookies. Essential cookies are needed for the Site to function and are always active. Non-essential cookies (such as analytics) are only set with your consent, which you give through the cookie banner shown on your first visit. You can change or withdraw your cookie preferences at any time through your browser settings or the banner controls.
How long I keep your dataCookies
8
I keep enquiry and correspondence data only for as long as needed to respond to you and manage any resulting working relationship, and to meet legal or accounting requirements (typically up to [6] years for financial records). Analytics data is retained according to the settings of the analytics provider. After these periods, data is deleted or anonymised.
Your rights
9
Under UK GDPR, you have the right to:
Access the personal data I hold about you.
Ask me to correct inaccurate or incomplete data.
Ask me to delete your data ("right to erasure").
Restrict or object to how I process your data.
Request a copy of your data in a portable format.
Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email me at hello@sisterstudio.co.uk.
I will respond within one month.
Complaints
10
If you are unhappy with how I have handled your data, you can contact me directly, or lodge a complaint with the UK's data protection regulator:
Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113
Changes to this policy
11
I may update this policy from time to time. Any changes will be posted on this page with a revised "Last updated" date.