Privacy Policy

Kubt Studio is an independent web design and development studio based in Norwich, United Kingdom.

For data protection purposes, the organisation responsible for your personal information is:

We may collect personal information when you use our website, submit an enquiry or get in touch with us.

This may include:

• Contact information: Your name, email address, phone number and business name.
• Project information: Your website address, project requirements, budget, preferred timeline and any other details you choose to provide.
• Uploaded files: Images, documents, designs or other materials you attach to a project enquiry.
• Communication records: Emails, messages and other correspondence between you and Kubt Studio.
• Technical information: Information such as your IP address, browser type, device information and website usage data, where collected through server logs or enabled website technologies.

Please avoid submitting passwords, payment card details or other sensitive information through our enquiry forms.

We use your information to:

• Respond to enquiries and questions.
• Understand your project requirements and assess whether we can help.
• Prepare proposals, estimates and project plans.
• Communicate with you throughout a project.
• Deliver and support services you request.
• Maintain website security and prevent misuse.
• Meet applicable legal and accounting obligations.

We will not use your enquiry details for unrelated marketing without an appropriate lawful basis.

Under UK data protection law, we must have a lawful reason for using your personal information.

Depending on the circumstances, we rely on:

• Legitimate interests: To respond to general enquiries, manage communications, improve our services and operate our business.
• Contractual necessity: To take steps requested by you before entering into an agreement, and to fulfil an agreement once one is in place.
• Legal obligation: Where we need to retain or disclose information to meet legal requirements.
• Consent: Where we ask for your permission for a particular use of your information, such as optional marketing or non-essential cookies.

We do not sell your personal information.

We may share information with trusted service providers where necessary to operate our website and business. These may include:

• Website hosting and infrastructure providers.
• Database and file storage providers.
• Email and communication services.
• Website security and spam prevention services.
• Website analytics services, including Google Analytics.
• Professional advisers where necessary.

These providers should only process personal information as necessary for the services they provide or where otherwise permitted by law.

We may also disclose information where required by law or to protect our legal rights.

Some service providers may process or store information outside the United Kingdom — including our email delivery provider and Google Analytics, as described in section 5 above.

Where personal information is transferred internationally, we will ensure that an appropriate legal transfer mechanism or safeguard is in place where required by applicable data protection law.

We only keep personal information for as long as reasonably necessary for the purposes described in this policy.

For example:

• Unsuccessful enquiries: We generally aim to retain enquiry information for up to 12 months after our last meaningful communication.
• Active projects: Information is retained for the duration of the project and for a reasonable period afterwards.
• Business and financial records: These may be retained for longer where required by legal or accounting obligations.

We may retain information for longer where necessary to resolve disputes, establish legal claims or comply with the law.

Some service providers may also retain data according to their own retention policies. For example, our email delivery provider, Resend, may retain email and log data in line with its own retention practices.

Under applicable data protection law, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request the deletion of your personal information.
• Ask us to restrict how we use your information.
• Object to certain types of processing.
• Request a copy of information you provided to us in a portable format, where applicable.
• Withdraw consent where processing is based on consent.

These rights are subject to certain conditions and exceptions.

To exercise a right, contact us using the details in section 12.

We take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites. We recommend reviewing their privacy policies separately.

We may update this policy from time to time to reflect changes to our services, website or legal obligations.

Any updates will be published on this page, with the revised date shown at the top.

If you have any questions about this policy or how we handle your personal information, please contact: