Privacy notice

Last updated: 29 September 2026

1. About this notice

This notice explains how Show Up Studio collects and uses your personal data when you visit our website, get in touch with us, or work with us. It also explains your rights and how the law protects you.

2. Who is responsible for your data

Show Up Studio is the data controller for the personal data described in this notice, which means we decide how and why it is used. In this notice, "we", "us" and "our" mean Show Up Studio.

You can contact us about anything in this notice at hello@show-up.studio.

3. What data we collect

When you visit our website

Our website does not use cookies, analytics or tracking tools. Like all websites, it does rely on some third-party services that receive technical information, such as your IP address and browser type, when your device loads the page:

• Our hosting provider, which serves the website and may keep short-term server logs for security and performance.
• Google Fonts, which supplies the typefaces used on the site. Google receives your IP address when the fonts load. You can read how Google handles this data in the Google privacy policy.

When you contact us

If you email us or contact us through another channel, such as LinkedIn, we collect the information you choose to share. This usually includes your name, email address, your firm's name, your role, and details about what you need.

When you become a client

If we work together, we may also collect:

• Contact and billing details, such as names, email addresses, phone numbers and invoicing addresses.
• Project information, such as content, images and documents you send us, and access details for your website, hosting, domain or online listings where needed to do the work.
• Payment and transaction records, such as invoices and payments.

When we carry out research

Our projects often include research into how your clients choose a firm, for example interviews or surveys. When we speak to people as part of that research, we collect only what we need, such as their name, contact details and their answers. We explain how their information will be used before they take part, and we anonymise findings wherever possible.

4. How and why we use your data

We only use your personal data where UK data protection law allows it. The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 require us to have a lawful basis for each use:

• To reply to your enquiry and discuss working together. This is necessary to take steps at your request before entering into a contract, or is in our legitimate interest in responding to people who contact us.
• To deliver our services and manage our relationship with you. This is necessary to perform our contract with you.
• To keep financial and tax records. This is necessary to comply with our legal obligations.
• To run, secure and improve our business and website. This is in our legitimate interests, where those interests are not overridden by your rights.
• To carry out research for client projects. This is based on consent or legitimate interests, depending on the project. We tell participants which applies before they take part.

If we ever send marketing emails, we will only do so where the law allows, and every email will let you opt out. We do not make decisions about you using automated processing or profiling.

5. Cookies

Our website does not currently set any cookies or store information on your device. If this changes, for example if we add website analytics, we will update this notice and ask for your consent before setting any non-essential cookies.

6. Who we share your data with

We do not sell your personal data. We share it only where necessary to run our business, deliver our services or meet our legal obligations. This may include:

• Service providers who help us operate, such as our email, cloud storage, website hosting, accounting and invoicing providers.
• Specialist subcontractors who work with us on your project, such as a professional photographer. We share only what they need to do the work.
• Professional advisers, such as our accountant.
• HM Revenue & Customs and other authorities, where the law requires it.

7. International transfers

Some of our service providers may store or process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.

8. How we protect your data

We use appropriate technical and organisational measures to protect your personal data, including secure passwords, two-factor authentication where available, access controls, software updates and backups.

If we ever need access to your website or accounts, we will ask you to share it securely. Please do not send passwords by ordinary email.

9. How long we keep your data

• Enquiries that do not lead to work: up to 12 months after our last contact, then deleted.
• Client records: for the length of our working relationship, and afterwards for as long as tax law requires and to deal with any legal claims, typically six years.
• Research data: only for as long as needed for the project. Findings we keep are anonymised.

When we no longer need your data, we delete it securely or anonymise it.

10. Your rights

Under UK data protection law, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data in certain circumstances.
• Object to us using your data in certain circumstances.
• Restrict how we use your data in certain circumstances.
• Move your data to another provider, where it is technically feasible.
• Withdraw consent at any time, where we rely on your consent. This does not affect anything we did before you withdrew it.

Which rights apply depends on the circumstances and the lawful basis we rely on. To use any of them, email hello@show-up.studio. We will respond within one month.

11. How to complain

If you have concerns about how we use your personal data, please contact us first at hello@show-up.studio and we will do our best to resolve them.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

12. Changes to this notice

We may update this notice from time to time. Any changes will be posted on this page with a new "last updated" date.