GDPR
UK GDPR compliance statement.
This statement outlines how we comply with the UK General Data Protection Regulation when handling personal data for studio operations.
Data controller: shadowbrook-dwell. Contact: [email protected].
Lawful bases
We process data only when a lawful basis applies.
- Contractual necessity for commissioned work.
- Legitimate interests in maintaining client relationships.
- Consent for optional analytics cookies.
Data minimisation
We collect only the information needed to scope, deliver, and archive visual projects.
Individual rights
Your GDPR rights in practice.
Right of access
You can request a copy of personal data we hold about you.
Right to rectification
We will correct inaccurate or incomplete data promptly.
Right to erasure
You can ask us to delete data when it is no longer required.
Right to restrict processing
Processing can be paused while disputes are resolved.
Right to object
You can object to processing based on legitimate interests.
Data portability
Where applicable, we provide data in a portable format.
Safeguards
Security and accountability.
We apply access controls, encrypted storage, and supplier agreements to protect data. Our team reviews processes regularly to ensure compliance.
How to make a request
Email [email protected] with your request. We respond within one month as required by UK GDPR.