Privacy policy

Effective date: 30th June, 2025

ZOARC Studio Limited (“ZOARC”, “we”, “our”, or “us”) is committed to safeguarding your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information when you use or interact with our websites:

We are a limited company registered in England and Wales under the name ZOARC Studio Limited. Our registered office is located at 67 Baroque Gardens, Mary Rose Square, London SE16 7EL, United Kingdom. If you have any queries about this policy or wish to exercise your rights, please contact us at connect@zoarc.studio.

1. Information we collect

We may collect and process the following categories of personal data, depending on how you interact with our websites or services.

a) Personal Identifiable Information (PII)

This refers to information that you voluntarily provide when you submit a query or communicate with us directly. This may include:

Your full name
Email address
Telephone number
Any other personal details you provide via contact forms or email

We only collect personal data that is necessary for the intended purpose, such as responding to enquiries or providing services.

b) Technical and usage data

When you browse our websites, we automatically collect information that helps us understand user behaviour and improve performance. This includes:

Your IP address
Browser type and version
Operating system and device details
Pages visited and the time spent on each
Referring websites or URLs

This data is typically aggregated and used for statistical purposes; it does not directly identify individuals.

c) Cookies and tracking technologies

We use cookies and similar technologies to personalise your experience, monitor traffic, and facilitate advertising campaigns. These may include essential cookies for website functionality, analytical cookies (e.g., via Google Analytics), and marketing cookies (e.g., via Google Ads). Please see our Cookie Policy for full details.

We do not knowingly collect data from individuals under the age of 13. If we discover such information has been collected without appropriate consent, we will promptly delete it.

2. How we use your personal data

We use personal data strictly for purposes that are clearly defined and lawful under the UK GDPR. The primary uses include:

To respond to your enquiries: We use the contact information you provide to reply to your questions and provide information about our services.
To deliver our services: Including Microsoft Office template development, branding consultations, and architectural/interior design services.
To enhance our website functionality: Technical data allows us to maintain and improve the performance, security, and usability of our websites.
For analytical and performance purposes: Data collected through Google Analytics helps us assess site usage patterns and user preferences.
For marketing and advertising: We may use data from tools such as Google Ads to tailor and deliver advertising content, based on your previous interactions with our websites.
To comply with legal obligations: In some cases, we may process your data to fulfil legal duties, such as responding to regulatory requests.

We do not use your data for profiling or any automated decision-making processes.

3. Legal basis for processing

Under the UK GDPR, we must have a valid legal reason for collecting and processing your personal data. These include:

Consent: When you voluntarily provide your data, for example, by submitting a contact form, we rely on your explicit consent.
Legitimate interests: Where processing is necessary for our legitimate business objectives, provided these do not override your fundamental rights.
Legal obligation: Where the processing is required to comply with a law or regulatory obligation.

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

4. Data sharing and third parties

We do not sell, rent, or trade your personal data. However, we may share it with trusted third parties where necessary to support our business operations. These include:

Analytics and advertising platforms: Such as Google Analytics and Google Ads, to help us understand user interaction and measure marketing performance.
Scheduling tools: If you book a consultation, we may use tools such as Calendly to facilitate appointment scheduling.
Professional advisers: Such as lawyers, accountants, and insurers where necessary for legal or contractual reasons.
Regulatory authorities: We may be required to disclose your personal data to public authorities, regulators, or law enforcement agencies.

We require all third parties to respect the security of your data and to treat it in accordance with the law. They are only permitted to process your data for specified purposes and on our instructions.

5. International data transfers

Some of our service providers may be located outside of the United Kingdom or the European Economic Area (EEA). When transferring your data internationally, we ensure your information remains protected by:

Using legally approved Standard Contractual Clauses (SCCs)
Confirming the country of transfer has an adequacy decision by the UK Government
Enforcing data protection commitments through contractual obligations

These measures are implemented to ensure your data receives a level of protection equivalent to that provided under UK data protection law.

6. Data retention

We only retain your personal data for as long as necessary to fulfil the purpose for which it was collected, including to satisfy legal, regulatory, tax, or accounting obligations. When data is no longer required, we ensure it is securely deleted, anonymised, or erased from our systems.

The retention period may vary depending on the type of data and the context in which it was provided. For example, data collected via a contact form will be retained only for as long as it is needed to process your request.

7. Your data protection rights

Under the UK GDPR, you have the following rights with respect to your personal data:

Right to access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to rectification: You can request that any incomplete or inaccurate data be corrected.
Right to erasure (Right to be forgotten): In some cases, you may request that your data be deleted.
Right to restriction of processing: You may ask us to suspend the processing of your data if you want us to establish its accuracy or the reason for processing it.
Right to data portability: You can request your data be provided in a structured, commonly used format, and, where feasible, transferred to another provider.
Right to object: You can object to the processing of your personal data based on our legitimate interests.
Right to withdraw consent: Where we rely on consent to process your data, you may withdraw it at any time.

To exercise any of these rights, please contact connect@zoarc.studio. We aim to respond to all legitimate requests within one month.

8. How we keep your data secure

We implement a variety of security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include:

Secure server infrastructure with firewall protection
SSL encryption for secure data transmission
Password and access control systems
Regular security audits and vulnerability scanning
Internal data access protocols for staff

Despite our best efforts, no online platform is entirely secure. We encourage users to remain vigilant and to notify us immediately if they suspect any breach of security.

9. Changes to this privacy policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. We recommend that you check this page periodically for updates.

Where significant changes are made, we will take reasonable steps to notify users, such as posting a notice on the website or contacting you directly where appropriate.

The “Effective Date” at the top of this policy indicates when it was last updated.

10. Contacting us

If you have any questions, requests, or concerns about this Privacy Policy or how your personal data is handled, please get in touch at connect@zoarc.studio

Privacy Policy