Privacy Policy

Last updated: 18 October 2026

Backstairs Studio is committed to protecting your personal information and handling it responsibly.

This policy explains how Backstairs Ltd, trading as Backstairs Studio ("we", "us" or "our"), collects, uses, stores and protects personal data through our website, forms, communications and services.

1. Who We Are

Backstairs Ltd is a photography and creative production company based in London, United Kingdom. We are the data controller responsible for personal information collected through our website and business activities.

Website: www.backstairsstudio.com
Email: info@backstairsstudio.com
Registered company name: Backstairs Ltd

For questions about this policy or your personal information, contact us at the email address above.

2. Information We Collect

Depending on how you interact with us, we may collect:

• Contact information: Your name, email address, telephone number and business or organisation.
• Enquiry information: Details submitted through contact forms, commission enquiries, emails or other correspondence.
• Project information: Briefs, creative references, scheduling details, requirements and other information relevant to a prospective or confirmed commission.
• Subscription information: Your email address, name where provided, subscription preferences and consent records.
• Technical information: IP addresses, browser information and website usage data where collected by our website or service providers.
• Booking and transaction information: Details necessary to arrange services, manage bookings, issue invoices and maintain financial records.

We collect information directly from you and, where applicable, through the platforms used to operate our website and services.

3. How We Use Your Information

We use personal information to:

• Respond to enquiries and correspondence.
• Review, quote for and manage photographic commissions.
• Arrange bookings and deliver services.
• Manage customer relationships and business administration.
• Send newsletters, announcements and promotional communications where permitted.
• Maintain website functionality, security and performance.
• Meet legal, accounting and regulatory obligations.

We do not sell your personal information.

4. Legal Basis for Processing

Under UK GDPR, we process personal information where we have an appropriate legal basis:

• Contract: To provide services or take steps requested before entering into an agreement.
• Legitimate interests: To respond to general enquiries, administer our business, maintain security and manage professional relationships, where these interests do not override your rights.
• Consent: To send subscription-based marketing communications and use optional website technologies where consent is required.
• Legal obligation: To comply with applicable tax, accounting and other legal requirements.

Where processing is based on consent, you may withdraw it at any time.

5. Contact Forms and Enquiries

When you submit an enquiry or contact form, we use the information provided to review your request, respond to you and arrange any relevant follow-up.

Your details may be retained for administrative purposes, including maintaining records of correspondence and prospective work.

Submitting an enquiry does not automatically subscribe you to marketing communications.

6. Newsletters and Marketing

If you subscribe to our newsletter or mailing list, we use your information to send studio news, project updates, announcements, offers and other relevant content.

You can unsubscribe at any time using the link provided in our marketing emails or by contacting us directly.

We may also send marketing about similar services to existing customers where legally permitted and where the required opt-out opportunities have been provided.

We do not add general contact-form submissions to our newsletter mailing list without an appropriate legal basis.

7. Sharing Your Information

We may share information with trusted service providers where necessary to operate our business, including:

• Website hosting and form-processing providers.
• Email and newsletter platforms.
• Booking, payment and accounting services.
• Cloud storage and business administration tools.
• Professional collaborators where necessary for an agreed project.

These parties receive only the information reasonably necessary for their role and must handle personal data in accordance with applicable data protection requirements.

We may also disclose information where required by law.

8. Data Storage and Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

• Enquiries and correspondence: Retained while relevant to prospective work, ongoing communications or legitimate business records.
• Client and project records: Retained for the duration of the working relationship and any necessary subsequent administrative or legal period.
• Financial records: Generally retained for at least six years, or longer where legally required.
• Newsletter subscriptions: Retained until you unsubscribe or your information is no longer required for the mailing list.

We periodically review stored information and delete or anonymise records when no longer necessary, subject to legal obligations.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to support essential functionality, security and website performance.

Where we use optional analytics, marketing or other non-essential tracking technologies, we provide the required information and obtain consent where applicable.

You can manage cookies through your browser settings and any cookie preferences provided on our website.

10. International Data Transfers

Some service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we ensure that appropriate protections are in place as required by UK data protection law, such as recognised adequacy arrangements or approved contractual safeguards.

Information about applicable safeguards is available on request.

11. Your Rights

Under UK data protection law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information.
• Restrict or object to certain processing.
• Request transfer of your information where applicable.
• Withdraw consent where processing relies on it.

You also have the right to object to the use of your personal information for direct marketing at any time.

To exercise your rights, contact info@backstairsstudio.com. We will respond in accordance with applicable legal requirements.

You may also raise a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

12. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration and loss.

Access to personal data is limited to individuals and service providers who require it for legitimate business purposes.

13. External Websites

Our website may contain links to third-party websites, booking services and social media platforms.

We are not responsible for the privacy practices of independently operated third-party websites. Their own privacy policies apply when you use their services.

14. Changes to This Policy

We may update this policy to reflect changes in our services, website operations or legal obligations.

The latest version will be published on this page with its updated revision date.

For any privacy-related questions or requests, contact info@backstairsstudio.com.