1. Cookie Information (100% Cookie-Free Website)
Verified Zero-Cookie & Zero-Tracker Architecture
studioprogresson.com sets zero HTTP cookies (Set-Cookie: None), uses zero browser localStorage or sessionStorage identifiers, and loads zero third-party analytics or advertising pixels.
Under Regulation 6 of the UK Privacy and Electronic Communications Regulations 2003 (PECR) and Information Commissioner’s Office (ICO) guidance, websites that do not store or access cookies or tracking identifiers on a visitor’s device are exempt from displaying cookie consent banners. Specifically:
- Zero Analytics or Ad Trackers: We do not run Google Analytics, Meta/Facebook Pixel, TikTok Pixel, cross-site retargeting scripts, or session-replay tools.
- Self-Hosted Studio Media: All studio photography and gallery previews on this site are hosted directly on our own domain rather than through third-party social media embeds.
- External Links: Outbound links to Instagram, Facebook, WhatsApp, or Google Maps open in a new tab only if you actively choose to click them, at which point that external platform’s own privacy and cookie policy applies.
2. Data Controller Details
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
- Data Controller: The Exeter Studio (operated by Paul Foster)
- Studio Address: Unit 6c, Bakers Yard, Alphin Brook Road, Marsh Barton, Exeter, Devon, EX2 8RG, United Kingdom
- Privacy Contact Email: info@studioprogresson.com
- Telephone: 07496 431782
3. Personal Data We Collect & Lawful Basis
We only collect personal information that you voluntarily provide when submitting a studio booking enquiry or contacting us directly by email, phone, or WhatsApp:
- Contact & Booking Details: Your name, email address, phone number, preferred shoot date, selected hire package/upgrades, estimated quote breakdown, and project notes.
- Invoicing & Accounting Records: Business/billing name, billing address, invoice reference, and bank transfer confirmation details for confirmed studio hires.
- Standard Server Security Logs: Like all web servers, our edge infrastructure processes transient request metadata (IP address and user-agent string) strictly to deliver web pages over HTTPS and block automated abuse/spam.
Lawful Bases Under Article 6 UK GDPR
- Contract & Pre-Contractual Steps — Art. 6(1)(b): Responding to your availability enquiry, preparing quotes, scheduling studio access, and fulfilling your booking.
- Legal Obligation — Art. 6(1)(c): Retaining commercial invoices and financial records required for UK tax and accounting compliance (HMRC).
- Legitimate Interests — Art. 6(1)(f): Protecting network security, preventing form spam via our honeypot field, and coordinating studio logistics. We never send unsolicited marketing newsletters or sell contact data.
4. Infrastructure Processors & Data Transfers
We use a minimal set of trusted technical service providers strictly to host this website and deliver your enquiries to us:
- Netlify, Inc.: Static HTTPS web hosting and encrypted processing of booking form submissions made on
studioprogresson.com.
- Cloudflare, Inc.: Authoritative DNS and email security routing.
- Direct Communications: Standard email providers and WhatsApp (Meta Platforms) solely when you choose to message us through those channels.
Where infrastructure providers process technical request or form data outside the UK, transfers are safeguarded under the UK International Data Transfer Addendum (IDTA) and Standard Contractual Clauses (SCCs).
5. Data Retention & Your UK GDPR Rights
- Enquiries Not Resulting in a Booking: Retained for up to 24 months so we can assist with follow-up shoot planning, or deleted immediately upon request.
- Confirmed Bookings & Invoices: Retained for 6 years plus the current tax year in accordance with UK HMRC record-keeping obligations.
Under UK GDPR, you have the right to request access to your personal data, rectification of inaccurate details, erasure (where we are not legally required to retain accounting records), restriction of processing, data portability, and the right to object to processing based on legitimate interests. To exercise any right, email info@studioprogresson.com.
If you ever have concerns about how your data is handled, please contact us first so we can resolve it promptly. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk (tel: 0303 123 1113).