1. Introduction and company information
This Privacy Policy explains how Horizon Atelier Studios Ltd collects, uses, discloses, stores, and protects personal data when you interact with us, use our services, visit our website, contact us, or otherwise engage with our business activities.
Horizon Atelier Studios Ltd is the data controller responsible for your personal data for the purposes described in this Privacy Policy.
Company details:
Horizon Atelier Studios Ltd
Horizon Atelier, 3 Whitechapel Road, London E1 1DU, United Kingdom
Email: [email protected]
Phone: +44 20 7946 8372
This Privacy Policy is intended to be read together with any other privacy notices or fair processing notices we may provide from time to time. It applies to personal data relating to clients, prospective clients, collaborators, suppliers, website users, contractors, job applicants, and other individuals whose data we process in the course of our business.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your relationship with us and the nature of our interactions:
- Identity data: name, title, job title, company name, and similar identifiers.
- Contact data: email address, telephone number, postal address, and other contact details.
- Business and project data: information relating to enquiries, briefs, proposals, contracts, creative services, deliverables, meeting notes, correspondence, and project communications.
- Technical data: IP address, browser type, device identifiers, operating system, access times, pages viewed, and website usage information.
- Marketing and communication data: preferences in receiving marketing from us and your communication preferences.
- Transaction and billing data: invoicing details, payment status, bank or payment information where necessary for our services.
- Recruitment data: CVs, application materials, interview notes, references, and information provided during the hiring process.
- Any other data you choose to provide: including information in emails, forms, or other communications sent to us.
We may collect personal data directly from you, from your organisation, from publicly available sources, from third-party service providers, and from website analytics or similar tools.
We do not intentionally collect special category data unless it is necessary and lawful to do so, for example where you voluntarily provide such information or where required in connection with a legal obligation or employment-related obligation. If we do collect special category data, we will apply additional safeguards as required by applicable law.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and communicate with you;
- to provide our creative, studio, consultancy, and related corporate services;
- to manage client relationships, projects, and supplier relationships;
- to prepare proposals, contracts, invoices, and business records;
- to administer our website and improve user experience;
- to conduct marketing, business development, and promotional activities where permitted;
- to comply with legal, regulatory, accounting, and tax obligations;
- to detect, prevent, and investigate fraud, misuse, or security incidents;
- to recruit staff, contractors, and collaborators;
- to establish, exercise, or defend legal claims.
We only process personal data where we have a valid legal basis to do so and where processing is necessary for the stated purpose.
4. Legal basis for processing
Depending on the context, we rely on one or more of the following legal bases for processing personal data:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms. This may include running and developing our studio operations, managing client and supplier relationships, improving services, maintaining security, and marketing to existing contacts where permitted.
- Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as certain marketing activities or optional communications.
- Legal obligation: where processing is necessary to comply with legal or regulatory requirements.
- Vital interests: where processing is necessary to protect someone’s life or physical safety in exceptional circumstances.
Where we rely on legitimate interests, we will carry out an assessment to ensure that our interests are balanced against your rights and expectations.
5. Data sharing and third parties
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy. Such third parties may include:
- service providers acting as data processors, such as IT hosting providers, cloud storage providers, website analytics providers, email service providers, customer relationship management tools, and document management platforms;
- professional advisers, including lawyers, accountants, auditors, insurers, and consultants;
- payment providers, banks, and invoicing platforms;
- creative, technical, or operational partners engaged to support our services;
- government bodies, regulators, courts, law enforcement authorities, or other parties where disclosure is required by law;
- potential buyers, investors, or successor entities in connection with a corporate transaction, merger, acquisition, restructuring, or asset transfer.
We require third parties who process personal data on our behalf to use appropriate safeguards and to process personal data only in accordance with our instructions and applicable law.
We do not sell personal data.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom and/or outside the European Economic Area, we will take steps to ensure that appropriate safeguards are in place to protect the data in accordance with applicable law. These safeguards may include:
- the use of standard contractual clauses or equivalent transfer mechanisms;
- transfers to countries deemed to provide an adequate level of protection;
- additional technical and organisational measures where appropriate.
If you would like further information about international data transfers, you may contact us using the details provided below.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, reporting, or contractual requirements.
Retention periods may vary depending on the type of data and the purpose of processing. In general:
- client and supplier records are retained for the duration of the relationship and for a reasonable period thereafter;
- financial and tax records are retained for the period required by applicable law;
- enquiry and communication records are retained for as long as needed to manage the enquiry and any follow-up;
- recruitment data is retained for the recruitment process and, where appropriate, for a limited additional period with your consent or where permitted by law;
- website analytics and similar technical data are retained according to the settings of the relevant tools and our internal policies.
When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer be associated with an identifiable individual.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: the right to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: the right to request correction of inaccurate or incomplete personal data.
- Erasure: the right to request deletion of personal data in certain circumstances.
- Restriction: the right to request restriction of processing in certain circumstances.
- Data portability: the right to receive certain personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where applicable.
- Objection: the right to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details set out in Section 12. We may need to verify your identity before responding to your request.
Please note that these rights are not absolute and may be subject to legal conditions, limitations, or exemptions.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal was received.
If you withdraw consent, we may not be able to provide certain optional services, communications, or functionality that depend on that consent.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can address your concerns directly.
You also have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you are located in another jurisdiction, you may also have the right to complain to your local data protection authority.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include:
- access controls and role-based permissions;
- password protection and multi-factor authentication where appropriate;
- secure storage and encryption measures where appropriate;
- staff confidentiality obligations and data protection training;
- regular review of systems, policies, and security practices;
- procedures for identifying and responding to suspected data incidents.
No method of transmission or storage is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or our handling of personal data, or if you wish to exercise your rights, please contact:
Horizon Atelier Studios Ltd
Horizon Atelier, 3 Whitechapel Road, London E1 1DU, United Kingdom
Email: [email protected]
Phone: +44 20 7946 8372
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will be posted with a revised effective date or other indication of the latest revision where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Horizon Atelier Studios Ltd processes personal data.