OTB Studio
Back to OTB.studio

Privacy Policy

Last updated · 11 May 2026

This Privacy Policy explains how OTB.studio (“we”, “us”, “our”) collects, uses, and protects information about you when you visit https://otb.studio or engage our services. We are committed to handling your personal data lawfully and transparently in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

OTB.studio is the trading name of Oliver, a UK-based sole trader providing web design, development, SEO, and consultancy services. We are the data controller for the personal data described in this policy. You can contact us about anything here at oliver@otb.studio.

2. What we collect

We collect only the data we need to respond to enquiries and deliver work:

  • Contact form data: your name, email address, optional phone number, and the details of your enquiry.
  • Technical data: limited request data (such as IP address and user-agent) processed by our hosting provider to deliver the site and protect it from abuse.
  • Measurement data: with your consent, Google’s measurement tools collect data about visits and ad interactions, as described in section 8.
  • Marketing data: when you arrive via an advertising campaign, your browser may pass UTM parameters in the URL. We may record these alongside your enquiry so we can tell which campaigns are generating genuine work.

We do not knowingly collect data from children under 16.

3. How we use it

  • To respond to your enquiry and provide quotes or proposals.
  • To deliver work and communicate with you as a client.
  • To meet our legal, accounting, and tax obligations.
  • To improve the website and measure the performance of marketing activity.
  • To protect the site from spam, abuse, and security threats.

4. Legal basis

We rely on the following lawful bases:

  • Consent: when you submit the contact form, you consent to us using your details to respond; and measurement cookies are set only if you accept them via the cookie notice.
  • Contract: to deliver work you have engaged us for.
  • Legitimate interests: to run and secure our website, and to measure marketing performance, in a way that does not override your rights.
  • Legal obligation: to comply with tax, accounting, and regulatory requirements.

5. Who we share data with

We never sell your data. We share it only with trusted service providers who help us run the website and respond to enquiries:

  • Resend: transactional email provider that delivers your enquiry to us and your confirmation email to you.
  • Netlify: hosting and serverless functions provider for the site itself.
  • Google: advertising and analytics measurement, only where you have consented via the cookie notice (see section 8).
  • Accountants and professional advisors: where required for invoicing, tax, or other regulatory compliance.

6. International transfers

Some of our providers (such as Resend and Netlify) may process data outside the UK. Where this happens, we rely on Standard Contractual Clauses and/or UK Adequacy Decisions to ensure your data receives equivalent protection.

7. How long we keep it

Enquiry data is retained for up to 24 months after our last meaningful contact, so we can follow up on past conversations. Client data is retained for the duration of our engagement and for 6 years afterwards to meet UK tax and accounting requirements, after which it is securely deleted.

8. Cookies & analytics

With your consent, we use Google’s measurement tools (Google Ads conversion measurement and, where enabled, Google Analytics) to understand how people find the site and which advertising leads to genuine enquiries. These tools set cookies only if you accept the cookie notice; if you decline, no advertising or analytics cookies are set and the site works exactly the same. Strictly necessary cookies set by our hosting platform to deliver the site and protect it from abuse are used in either case. You can change your choice at any time via “Cookie choices” in the footer.

9. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Request deletion (the “right to be forgotten”).
  • Restrict or object to how we use your data.
  • Withdraw consent at any time.
  • Lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise any of these rights, email oliver@otb.studio. We will respond within one month.

10. Security

We use HTTPS across the site, encrypted transactional email, hosting on reputable cloud infrastructure, and least-privilege access controls. No system is perfectly secure, but we take this seriously and review our setup regularly.

11. Changes

We may update this policy from time to time. The “last updated” date at the top of the page reflects the most recent change. Material changes will be flagged on the site or sent to you directly where appropriate.

12. Contact

Questions about this policy or how we handle your data? Email oliver@otb.studio.