Privacy policy

VISION GURU LTD, trading as Digital Studio, is the controller of the personal data described here under the UK GDPR and, where applicable, the EU GDPR.

Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Company number: 16510984, registered in England and Wales
Privacy contact: hello@digitalstudio.world

The project brief requires your email address. Selected services and your project note are optional. We also receive the interface language and a starting-price reference for the services you selected. If you enter your name and email on the services page, those details are carried into the brief.

We use this information to answer your enquiry, discuss the work and prepare a quote. Sending a brief does not subscribe you to a mailing list or place an order. You do not have to provide this information by law; without a usable email address we cannot reply through this form.

The brief is submitted to this website and delivered through Cloudflare’s form-processing and email-routing infrastructure to our Google Gmail mailbox.

Please avoid including passwords, payment-card details or sensitive personal information in the project note. You can also contact us directly at hello@digitalstudio.world.

Cloudflare provides website delivery, DNS, request processing and security infrastructure. Browsing creates technical connection data such as IP address, requested URL, browser information and time of access. These data support page delivery, error diagnosis and protection against abuse. Network-error reporting may also send connection-failure diagnostics to Cloudflare.

We do not use advertising pixels. Google Analytics 4 loads only after your explicit consent, as explained below. Fonts and the visual effects are served from the site itself. This does not mean that hosting and email providers process no technical data.

With your consent, we use Google Analytics 4 to understand page visits and how often a project brief is successfully submitted. No Google Analytics script loads and no analytics request is sent before you choose to allow analytics. You can decline with the same ease and continue using the website.

We send a page path without query parameters or URL fragments. We do not send the referring page, form contents, names, email addresses or user IDs to Analytics. A successful-brief event is sent only after our server confirms submission and only if you have already allowed analytics. Google may process browser and device information, cookie identifiers and technical connection information. We do not use advertising features or Google signals, and enhanced measurement is disabled.

Use Analytics preferences in the footer to change your choice at any time. Withdrawing consent stops further measurement and clears this site’s Google Analytics cookies. It does not undo processing that occurred before withdrawal.

Analytics cookies are set only after you consent. Functional browser storage remembers your choices and supports the brief handoff below. Provider-operated security measures and Stripe’s separate checkout may have their own storage practices.

You can clear these items using your browser’s site-data settings. We do not use this storage for advertising. The selected language and contact details are included in your brief when you choose to send it.

• Optional analytics: your consent, Article 6(1)(a), to understand website use and successful brief submissions.
• Enquiries and projects: steps at your request before a contract and performance of a contract, Article 6(1)(b). For business contacts who are not themselves the contracting party, our legitimate interest in handling business correspondence under Article 6(1)(f).
• Reliable, secure operation: our legitimate interest in delivering the site, troubleshooting and preventing abuse, Article 6(1)(f).
• Accounting and legal duties: compliance with applicable legal obligations, Article 6(1)(c).

These references apply to the UK GDPR and, where applicable, the EU GDPR. We do not make decisions about you with legal or similarly significant effects solely through automated processing.

Sending the brief does not take a payment. If you choose an offered payment link, Stripe hosts the checkout separately. Stripe processes the contact, billing, payment and fraud-prevention information needed for that transaction. We receive payment-status and transaction information needed to manage the order; the brief form does not collect card numbers.

The providers involved in this website and enquiry flow are Cloudflare (delivery, security and email routing), Google Gmail (correspondence), Google Analytics (website measurement with consent) and Stripe (optional payments). Payment providers may also process data for their own regulatory and fraud-prevention purposes. Information may also be disclosed where required by law or necessary to establish or defend legal claims.

Provider information: Cloudflare privacy policy, Google privacy policy, and Stripe privacy policy.

We are a UK company and use providers with international operations, including Google Analytics and operations in the United States. Data may be processed outside your country, the UK or the EEA.

International transfers must use a lawful mechanism appropriate to the destination and provider, such as a relevant adequacy decision or approved contractual safeguards. Provider policies describe their transfer arrangements. Contact hello@digitalstudio.world for information about the destinations and safeguards applicable to your data, or to request a copy of the relevant safeguards.

Enquiry information is kept while the conversation is active and for as long as it is reasonably needed to answer follow-up questions, document what was agreed or address a dispute. The criteria are whether the enquiry is still active, whether it becomes a project, and whether a legal or accounting retention duty applies.

If an enquiry becomes a project, relevant correspondence and transaction records form part of the project records. Records needed for tax, accounting or legal claims may need to be kept after the project ends. Information no longer needed for those purposes should be deleted. Technical-log retention also depends on the provider and the security or troubleshooting purpose. Browser-storage lifetimes are listed above.

Analytics cookie expiry is separate from data already received by Google Analytics. Analytics data retention depends on the property settings and the type of data or report. Contact us for the current retention information or a deletion request.

Depending on the law and the processing involved, you can request access, correction, deletion, restriction of processing or a portable copy of your information.

Where processing relies on consent, you can withdraw it for future processing. Rights are subject to legal conditions; for example, some records must be retained to meet legal obligations. We may need proportionate information to verify your identity.

You can raise a concern with us or complain to the UK Information Commissioner’s Office (ICO). In the EEA, you can also contact the data-protection authority where you live, work or believe an infringement occurred.

We use HTTPS for the site and restrict the form’s delivery path to the services needed to handle enquiries. No internet transmission or storage system can be guaranteed completely secure.

Links to checkout, portfolio projects and other external sites take you to another operator’s service and privacy rules. We update this notice when the site or its processing changes. The date above identifies this version.