Privacy Policy
Last updated 4 September 2026
This policy explains what we do with personal data on studiotigris.com: what we collect, why, who else sees it, and what you can ask us to do about it.
Who we are
Studio Tigris Limited, a company registered in England and Wales, is the data controller for this website.
For anything to do with your data, write to hello@studiotigris.com. A person reads it.
What we collect, and why
We've kept this to what actually happens on the site rather than everything the law permits, so you can see the whole picture in one read.
When you visit
Our host records your IP address, the pages you request, your browser and device type, and the time of the request. This is how the site gets served, kept available, and protected from abuse. We rely on our legitimate interest in running a working, secure website. There's no way to opt out of this and still be served the page.
If you allow analytics
Google Analytics records which pages you visit, roughly where in the world you are, and how you arrived. We use it to see which pages are working and which aren't. Our lawful basis is your consent, and nothing loads until you give it.
If you allow video
The films on our project pages sit with a third-party video host. Loading one shares your IP address and player activity with them, so the embed stays unloaded until you allow it. Our lawful basis is your consent.
When you get in touch
If you email us or book a call, we keep what you send: your name, your address, and whatever you tell us about your project. That's so we can reply and, if it goes that way, work together. Our lawful basis is our legitimate interest in answering people who contact us, and taking steps at your request before entering a contract.
Cookies
Nothing beyond the essentials runs until you choose. The Cookie Policy lists every cookie the site sets, and you can change your mind at any time from the Cookie settings link in the footer.
Who else sees it
We don't sell personal data and we don't share it for anyone else's marketing. These are the companies that process it on our behalf, each under a contract that limits them to our instructions:
- Vercel, which hosts the site, and the server logs that come with it.
- Sanity, the content platform behind our project and article pages.
- Google, for Analytics if you allow it, and Google Calendar if you book a call.
- Our video host, which serves the films on our project pages if you allow video.
- Our previous video host, which still holds some older project films while we finish moving them across.
- Adobe, the font kit the site's typefaces load from, which sees your IP address on every page.
We'll also disclose data where the law requires it, and if the business were ever sold, records would transfer with it.
Where it goes
Some of those companies are based in the United States or process data there. Where data leaves the UK we rely on UK adequacy regulations, or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, so it stays protected to a UK standard. Ask us and we'll tell you which applies to a given provider.
How long we keep it
| What | How long |
|---|---|
| Your cookie choice | 12 months, then we ask again |
| Analytics data, if allowed | Up to 14 months, then Google deletes it |
| Server and security logs | About 30 days |
| Emails and booking enquiries | While we're in touch, then up to 24 months |
| Client project records | Six years after the work ends, for tax and legal reasons |
Your rights
Under UK data protection law you can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct anything that's wrong or incomplete.
- Delete it, where we have no good reason to keep it.
- Restrict what we do with it while a question is resolved.
- Hand it over in a portable format, or send it to someone else.
- Stop processing it where we've relied on legitimate interests, including any direct marketing.
- Withdraw consent you've given, which for cookies is the Cookie settings link in the footer.
Email hello@studiotigris.com and we'll respond within one month. It's free, and we don't need a reason.
We don't make any decision about you by automated means, and we don't profile you.
Security
The site is served over HTTPS, access to our systems is limited to people who need it, and our providers are chosen partly on their security posture. No website can promise perfect security, and we won't pretend otherwise, but if something went wrong that put your data at risk, we'd tell the ICO within 72 hours and tell you if it were likely to affect you.
Children
This site and our services are meant for adults, and we don't knowingly collect data about children. If you think we have, tell us and we'll delete it.
Changes
When this policy changes we update the date at the top. If a change affects what we do with data you've already given us, we'll ask again rather than assume.