Privacy Policy
Last updated: February 6, 2026
This Privacy Policy explains how Yeema Studio ("we", "us", "our") collects and uses personal data when you use this website or contact us.
1. Who We Are (Data Controller)
Yeema Studio is responsible for the personal data collected via this website.
2. Personal Data We Collect
- Contact data you provide (for example: name, email address, company name, message contents) when you email us or otherwise contact us.
- Scheduling data when you book a call (for example: name, email address, availability, timezone, and meeting details).
- Usage and device data (for example: IP address, browser type, pages viewed, approximate location inferred from IP, and log data) collected automatically when you browse the site.
- Communications (records of emails and other messages you send us).
If you provide personal data about someone else, you must ensure you have the right to share it with us.
3. How We Use Personal Data (Purposes and Lawful Bases)
We process personal data under the UK GDPR and the Data Protection Act 2018. Our main lawful bases are: performance of a contract (or steps before entering a contract), legitimate interests, consent (where required), and legal obligations.
- Responding to enquiries: to reply to messages and discuss a potential project.Lawful basis: legitimate interests; steps before entering a contract.
- Scheduling calls: to arrange and manage calls you book.Lawful basis: steps before entering a contract; legitimate interests.
- Delivering services: if you become a client, to provide product, brand, or web design/development services.Lawful basis: performance of a contract.
- Site security and abuse prevention: to keep the site secure and prevent fraud.Lawful basis: legitimate interests; legal obligations (where applicable).
- Marketing communications: to share updates about our services.Lawful basis: consent where required; otherwise legitimate interests. You can opt out at any time.
- Legal and accounting: to comply with legal obligations and handle disputes.Lawful basis: legal obligation; legitimate interests.
4. Cookies and Similar Technologies
We may use cookies and similar technologies to operate the website and, where enabled, to measure usage. Under UK law (including PECR), some cookies require your consent.
- Strictly necessary cookies: required for core functionality and security.
- Analytics cookies: help us understand how the site is used. Where required, we will only set these after consent.
- Third-party content: booking tools (for example, our scheduling provider) may set cookies when you interact with them.
You can manage cookies through your browser settings. If we implement a cookie banner, you will be able to manage preferences there.
5. Sharing Personal Data (Processors and Recipients)
We may share personal data with trusted service providers who help us run the site and deliver services. These providers act as processors (handling data on our instructions) or independent controllers depending on the service.
- Scheduling: Cal.com (used to allow you to book calls).
- Hosting/Infrastructure: our web hosting and content delivery providers.
- Email/Communications: email providers used to send and receive messages.
- Professional advisers: legal, accounting, or insurance advisers (when necessary).
We do not sell your personal data.
6. International Transfers
Some service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place (for example, the UK International Data Transfer Agreement (IDTA) or other approved mechanisms).
7. Data Retention
We keep personal data only as long as necessary for the purposes described above, including to meet legal, accounting, or reporting requirements.
- Enquiry emails: typically up to 24 months.
- Call bookings: typically up to 12 months.
- Client records: typically up to 6 years after the end of a client relationship (subject to circumstances).
8. Your Rights
Subject to conditions and exceptions under UK data protection law, you have rights including:
- Access to your personal data.
- Rectification of inaccurate personal data.
- Erasure of personal data.
- Restriction of processing.
- Data portability.
- Objection to processing (including objection to direct marketing).
- Withdrawal of consent (where processing is based on consent).
To exercise your rights, contact us at [email protected].
You also have the right to complain to the Information Commissioner's Office (ICO). You can find details at ico.org.uk.
ICO contact details: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113.
9. Providing Your Data
You are not legally required to provide personal data to us. However, if you do not provide certain details (for example, an email address), we may not be able to respond to your enquiry or arrange a call.
10. Automated Decision-Making
We do not use your personal data for automated decision-making (including profiling) that produces legal or similarly significant effects.
11. Children's Privacy
This website is not intended for children and we do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date.