Privacy Policy

This Privacy Policy explains how CL Studio collects and uses your personal data when you visit our website, submit an enquiry, buy a template, purchase a website package, or order custom development work. We process personal data in line with UK GDPR and the Data Protection Act 2018.

Who we are

The data controller is Connor Lunn, trading as CL Studio, based in United Kingdom. If you have any questions about this policy or your data, email hello@clstudio.uk.

What we collect

• Contact and enquiry details: name, email address, phone number (if you provide it), and any message or project information you send through our contact, quote, or checkout forms.
• Project brief information: after purchasing a website package or custom development service, you may submit business details, design references, technical requirements, and other information needed to deliver your project.
• Order and payment records: what you bought, when, and how much you paid. Payments are processed by Stripe — we do not store full card numbers on our servers.
• Technical data: our hosting provider may log IP address, browser type, and basic request information for security and reliability.
• Local storage on your device: your browser may store shopping cart items and theme preference locally. This stays on your device unless you clear it.

How we use your data

• To respond to enquiries and provide quotes.
• To deliver website packages, custom development, and template purchases.
• To send order confirmations, download links, and project updates by email.
• To process payments and fulfil orders.
• To keep records for accounting, tax, and legal obligations.
• To improve how the site runs and to prevent abuse or fraud.

Legal bases for processing

• Contract: to deliver products and services you purchase.
• Legitimate interests: to respond to enquiries, operate the business securely, and follow up on orders.
• Consent: where you voluntarily submit a form or choose to share information with us.
• Legal obligation: where we must retain financial or tax records.

Who we share data with

We do not sell your personal data. We use trusted service providers to run the business:

• Vercel Inc. — website hosting.
• Resend — transactional email (order confirmations, download links, project updates).
• Stripe Payments UK Ltd — payment processing.

Each provider only receives the data needed to perform their service and is required to protect it. Where data is processed outside the UK, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep data

Enquiry records are kept while we are in contact and for a reasonable period afterwards. Order, payment, and project records are typically kept for up to six years where required for accounting and tax purposes. You can ask us to delete data sooner where we have no legal reason to keep it.

Your rights

Under UK data protection law you have the right to access, correct, erase, restrict, or object to processing of your personal data, and to data portability where it applies. You may withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

To exercise your rights, email hello@clstudio.uk. We aim to respond within one month.

Cookies and similar technologies

We use essential local storage for cart state and theme preference. We do not use advertising cookies or third-party analytics trackers on this site. If that changes, we will update this policy.

Children

Our services are aimed at businesses and adults. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Significant changes will be reflected on this page.