Privacy notice

BOTTEGA612 LTD runs 612 Studio (612.studio) and bottega612.com. We are registered in England and Wales, company number 17053664, with our registered office at 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB. We are registered with the Information Commission (formerly the ICO), registration ZC181677. For anything about your personal data, email simon@612.studio.

What we collect, and why

When you contact us or apply to work with us, we collect your name, email, company and what you tell us about your project. We use it to reply and to see whether we are a fit (legitimate interests), and to run an engagement if one follows (contract).

When you buy from us, we collect your billing details. Stripe processes payments, and we never see your card number. We keep invoices and payment records because accounting law requires it.

When you work with us, we keep the names, work emails and phone numbers of your team, our correspondence and our meeting notes, to run the engagement (contract and legitimate interests). Personal data inside a product we build for you is handled under our contract's data processing terms, not this notice.

When you use our client portal, we keep your sign-in email and what you do there, to run the portal (legitimate interests).

On our websites, our host keeps standard server logs for security (legitimate interests). We don't use advertising cookies or trackers.

Who we share it with

Only the providers we run the business on, under their own terms: Google Workspace (email and documents), Stripe (payments), FreeAgent and our bank (accounts), Supabase (our portal and enquiry database), Vercel (hosting), Resend (email delivery) and GitHub (code). We use AI tools from providers such as Anthropic and OpenAI in our work, and they may process personal data in our email and documents. We don't sell personal data.

Outside the UK

Some of these providers process data outside the UK, mainly in the European Economic Area and the US. Where they do, we rely on UK adequacy regulations or on the safeguards UK data protection law recognises, such as standard contractual clauses. Ask us for details.

How long we keep it

Enquiries: up to 2 years. Contracts, invoices and engagement records: 6 years after the engagement ends. Portal accounts: until you delete yours or ask us to.

Your rights

You can ask for a copy of your personal data, and ask us to correct it, delete it, limit or stop our use of it, or send it to someone else. Email simon@612.studio.

Complaints

If you're unhappy with how we have handled your personal data, email simon@612.studio with "Data complaint" in the subject. We'll acknowledge it within 30 days, look into it, and tell you what we found and what we did. You can also complain to the Information Commission at ico.org.uk.

Changes

If this notice changes, the new version appears here with a new date.