Legal

Privacy Policy

Last updated 14 June 2026.

ISKO Studio ("ISKO Studio", "I", "me", "my") is committed to protecting your privacy. This policy explains what personal data I collect, why I collect it, how I use and protect it, and the rights you have over it. It applies to the website iskostudio.com and to my dealings with enquirers and clients.

I handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I am (data controller)

ISKO Studio is a sole trader providing web design and website care services, operating in the United Kingdom. For the purposes of data protection law, I am the data controller for the personal data described in this policy.

If you have any questions about this policy or about how your data is handled, contact me at contact@iskostudio.com.

2. The data I collect

I only collect data that I need. Depending on how you interact with me, this may include:

Enquiry data — when you use the contact form or email me: your name, business name (if given), email address, and the contents of your message.
Client data — if you become a client: billing details, project information, and any login or account details you share with me so I can build and maintain your website.
Technical data — when you visit this site, my hosting provider may automatically log limited technical information such as your IP address, browser type and the pages you request, for security and reliability.

I do not knowingly collect special-category data (such as health, ethnicity or religious information). Please do not send me such data through the contact form.

3. Why I use your data, and my legal basis

To respond to your enquiry — legal basis: legitimate interests (replying to someone who has contacted me).
To provide my services and manage our contract — legal basis: performance of a contract.
To send invoices and keep accounting records — legal basis: legal obligation and legitimate interests.
To keep this website secure and working — legal basis: legitimate interests.

I do not sell your data, and I will not use it for marketing without your clear consent.

4. Who I share it with

I use a small number of trusted third-party services ("processors") to run my business. They only process your data on my instructions:

Formspree — processes contact-form submissions and forwards them to my inbox. See the Formspree privacy policy.
GitHub Pages — hosts this website and may log technical data. See the GitHub privacy statement.
Email provider — I use a standard email service to receive and reply to messages.

I may also disclose data if required to do so by law. Some of these providers are based outside the UK; where that is the case, they operate under safeguards (such as UK-approved data-transfer mechanisms) that protect your data.

5. How long I keep it

Enquiries that don't become projects — kept for up to 12 months, then deleted.
Client records and correspondence — kept for the duration of our relationship and a reasonable period afterwards.
Invoices and financial records — kept for at least 6 years, as required by UK tax law.

6. Cookies & analytics

This website does not set advertising or tracking cookies, and does not currently use analytics. If I add analytics in future, I will update this policy and, where required, ask for your consent first.

7. Your rights

Under UK GDPR you have the right to:

access the personal data I hold about you;
ask me to correct inaccurate data;
ask me to delete your data ("right to be forgotten");
object to or restrict how I process your data;
request a copy of your data in a portable format;
withdraw consent at any time, where I rely on consent.

To exercise any of these, email contact@iskostudio.com. I will respond within one month.

8. Complaints

If you're unhappy with how I've handled your data, please contact me first so I can put things right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

9. Changes to this policy

I may update this policy from time to time. The "last updated" date at the top shows when it was last changed. Significant changes affecting clients will be communicated directly.

Contact

Email contact@iskostudio.com with any privacy questions and I'll reply within a working day.