Privacy Policy

Effective Date: 01/01/2025
Version: 1.0

At Starstruck Studio (referred to as "we," "our," or "us"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit and interact with our Pixieset website and services, in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

By using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please refrain from using our services.

1. Information We Collect

We collect personal data that is necessary for the functioning of our website and services. The types of personal data we collect include:

Personal Identification Information:
When you create an account, place an order, or communicate with us, we may collect personal details such as your name, email address, postal address, phone number, and billing information.
Payment Information:
For transactions, we collect payment details (e.g., credit/debit card information) through our secure payment processor. We do not store payment card details ourselves.
Usage Data:
We may collect non-personal data about your use of our website, including IP address, browser type, pages visited, and the time and date of your visit. This data helps us improve the functionality of the site.
Device Information:
We may collect information about the device you use to access our services, including device type, operating system, and mobile network information.

2. How We Use Your Information

We use your personal data for the following purposes:

To provide services:
We use your data to process orders, deliver your products or services, and to respond to inquiries or requests.
To improve our website and services:
We use data to analyse trends, monitor usage patterns, and enhance the user experience on our website.
To send communications:
With your consent, we may send you marketing emails, newsletters, and promotional offers related to our services. You can opt out at any time.
For legal and regulatory compliance:
We may use your data to comply with legal obligations, resolve disputes, and enforce our agreements.

3. Legal Basis for Processing Personal Data

We rely on the following legal bases under the GDPR for processing your personal data:

Consent:
Where you have provided consent to us for processing your data (e.g., signing up for newsletters or agreeing to terms and conditions), we process your data on this basis.
Contractual Necessity:
We process your personal data as necessary to fulfil a contract with you, such as processing and delivering your orders.
Legitimate Interests:
In some cases, we may process your personal data based on our legitimate business interests, such as improving the functionality of our website or marketing our services (as long as this does not override your rights and interests).
Legal Obligation:
Where required by law, we process your data to comply with regulatory obligations, such as tax and accounting requirements.

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your data with the following parties under certain circumstances:

Service Providers:
We may share your personal data with third-party service providers who help us operate our website, process payments, send communications, and provide customer support (e.g., payment processors, hosting providers). These providers only have access to the data necessary to perform their services and are obligated not to disclose or use it for other purposes.
Legal Requirements:
We may disclose your personal data if required by law or in response to a valid request by a government authority, such as to comply with a subpoena or similar legal process.
Business Transfers:
If our business is acquired or merged with another entity, your personal data may be transferred as part of the transaction.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. Cookies are small files stored on your device that help us:

Remember your preferences and settings
Analyse website traffic and performance
Improve user experience

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

For more information on how we use cookies, please refer to our [Cookie Policy].

6. Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect your data. These measures include:

Encryption of payment transactions
Secure servers and network infrastructure
Regular security audits and updates

While we strive to protect your data, no system can be completely secure. Therefore, we cannot guarantee the absolute security of your personal data, but we are committed to taking all reasonable steps to protect it.

7. Data Retention

We retain your personal data for no longer than necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. For example:

Order information is retained for accounting and tax purposes.
Marketing data is retained until you withdraw consent.

If you wish to request deletion of your personal data, you may contact us at bookings@starstruck.studio.

8. Your Rights Under the GDPR

As a data subject, you have the following rights under the GDPR:

Right to Access:
You have the right to request a copy of the personal data we hold about you.
Right to Rectification:
If any information we hold about you is incorrect or incomplete, you have the right to request its correction.
Right to Erasure ("Right to be Forgotten"):
You can request the deletion of your personal data in certain circumstances.
Right to Restrict Processing:
You may request that we limit the processing of your personal data, for example, while we review a request for rectification.
Right to Data Portability:
You may request a copy of your personal data in a structured, commonly used, and machine-readable format, and transfer it to another service provider.
Right to Object:
You can object to the processing of your personal data in certain circumstances (e.g., for direct marketing).
Right to Withdraw Consent:
If we rely on your consent for processing, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at bookings@starstruck.studio.

9. International Data Transfers

We do not transfer your personal data outside the United Kingdom or European Economic Area (EEA). If, in the future, we need to transfer data internationally, we will ensure that the transfer complies with applicable data protection laws.

10. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the content, privacy practices, or security of these websites. We encourage you to review their privacy policies before providing any personal data.

11. Children’s Privacy

Our services are not intended for individuals under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Effective Date" will be updated accordingly. We encourage you to review this page periodically for the latest information on how we protect your privacy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: [bookings@starstruck.studio]