Privacy Policy

Last updated: 5 May 2026

1. Who we are

Authentika Studio is a sole-trader creative marketing business based in Norwich, Norfolk, United Kingdom. Our data controller contact is:

Tadas Kirtiklis
Authentika Studio
Norwich, Norfolk, United Kingdom
hello@authentika.studio

2. What personal data we collect

We may collect and process the following categories of personal data:

• Contact and enquiry data: name, email address, phone number, and any information you provide in a contact or consultation form.
• Communications data: emails, messages, or other correspondence you send us.
• Website usage data: IP address, browser type and version, pages visited, time and date of visit, and referring URL, collected automatically via server logs or analytics tools.
• Business information: company name, industry, and project details provided during a consultation or project engagement.

We do not collect special category data (e.g. health, financial, or biometric data).

3. How we collect your data

We collect personal data when you:

• complete and submit a contact or consultation form on our website;
• email or message us directly;
• engage us for marketing or creative services; or
• browse our website (usage data collected automatically).

4. Lawful basis for processing

We process your personal data on the following lawful bases under UK GDPR Article 6:

• Legitimate interests (Article 6(1)(f)): to respond to enquiries, manage client relationships, and operate our business.
• Contract (Article 6(1)(b)): where processing is necessary to perform a contract with you or take steps prior to entering into one.
• Consent (Article 6(1)(a)): where you have specifically agreed to receive marketing communications from us. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): where we are required by law to retain or process certain information (e.g. for tax purposes).

5. How we use your data

We use your personal data to:

• respond to your enquiries and provide information about our services;
• deliver the creative or marketing services you have engaged us for;
• send service updates and relevant communications relating to your project;
• improve our website and services;
• comply with legal and regulatory obligations; and
• send marketing communications where you have consented.

We will never sell your personal data to third parties.

6. Who we share your data with

We may share your data with trusted third-party service providers who assist us in operating our website and delivering our services, including:

• website hosting and cloud infrastructure providers;
• email and communication platform providers; and
• analytics tools (where applicable).

All third parties are required to handle your data securely and only for the purposes we specify. We do not transfer your data outside the UK or EEA without appropriate safeguards in place.

7. How long we keep your data

We retain personal data only for as long as necessary:

• Enquiry data: up to 12 months if no contract is formed, or for the duration of the client relationship plus 6 years thereafter to meet legal obligations.
• Financial and contractual records: 6 years as required by HMRC.
• Website analytics data: up to 26 months in aggregated or anonymised form.

8. Cookies

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Strictly necessary cookies are always active. Where we use analytics or non-essential cookies, we will seek your consent before placing them. You can manage or disable cookies through your browser settings at any time.

9. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: to request a copy of the data we hold about you.
• Right to rectification: to ask us to correct inaccurate data.
• Right to erasure: to ask us to delete your data where there is no compelling reason to continue processing it.
• Right to restrict processing: to ask us to limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format where technically feasible.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: we do not carry out solely automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at hello@authentika.studio. We will respond within one month of receiving your request.

10. Right to lodge a complaint

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

We would, however, appreciate the chance to address your concerns before you contact the ICO.

11. Security

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. All data is transmitted over encrypted connections (HTTPS).

12. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

14. Contact us

For any questions or concerns about this Privacy Policy or our data practices, please contact:

Authentika Studio
hello@authentika.studio