Privacy Notice — Nead Studios

Nead Studios is the registered legal and trading name of the business (“we”, “us” or “our") and is the data controller responsible for the personal data we collect and process in connection with our website design, build, hosting and management services.

What personal data we collect

Identity and contact data: name, business name, email address, phone number, postal address.
Account and login data: username and password if we provide you with access to a client portal or content management system.
Project data: text, images, logos and other materials you supply for your website.
Communication data: messages, support tickets and feedback you send us.
Technical data: IP address, browser type and device information collected automatically when you use our website.

How we use your personal data

To provide and manage the services you have requested.
To communicate with you about your project, account and support requests.
To process payments and manage subscriptions.
To maintain the security and performance of our website and services.
To comply with legal and regulatory obligations.

Legal basis for processing

We process your personal data on the basis of: (a) performance of a contract with you; (b) compliance with a legal obligation; (c) our legitimate interests in running and securing our business; and (d) your consent, where you have given it (for example, for marketing emails).

Who we share data with

We share personal data only where necessary and with the following categories of recipients:

Service providers: website-building platforms, hosting providers, domain registrars, email and support tools.
Payment provider: Stripe processes payments, subscriptions, tax calculation and invoicing on our behalf. Card details are handled by Stripe and never stored by us.
Professional advisers: legal, accounting or insurance advisers where required.
Authorities: regulators, courts or law enforcement where required by law.

International transfers

Some of our service providers are based outside the European Economic Area. Where we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data retention

We keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting and tax purposes. Project materials are retained while your care plan is active and for a reasonable period afterwards to assist with any follow-up requests.

Your rights

Under data protection law, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure of your personal data in certain circumstances.
Object to or restrict processing of your data.
Request portability of your data.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at neadstudios@gmail.com. We will respond within one month.

Security

We use appropriate technical and organisational measures to protect your personal data, including encryption, access controls and secure hosting environments.

Cookies

Our website uses essential cookies required for its operation. We do not use marketing or analytics cookies without your consent. You can manage cookie preferences through your browser settings.

Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page.

Contact

If you have any questions about this Privacy Notice or how we handle your data, contact us at neadstudios@gmail.com.