Who we are
Consortium Studio is a brand and web studio based in London. When we say "we", "us" or "our" in this policy, we mean Consortium Studio Ltd, a company registered in England and Wales (Company number 13902983).

We're the controller of the personal data we collect through consortiumstudio.co.uk, quiz.consortiumstudio.co.uk, our emails, our ads and our client work. That means we decide how it's used and we're responsible for looking after it.

We're registered with the Information Commissioner's Office (ICO), registration number 13902983.

Questions about your data, or want to use any of your rights? Email consortiumstudiouk@gmail.com and Geenay will get back to you.

What we collect and how we get it
Things you give us

• Quiz and freebie sign-ups: your name, email address and your quiz answers and result

• Enquiries and discovery calls: your name, email, business name, website, and anything you tell us about your business when you book a call, fill in a form or message us (including on Instagram or LinkedIn)

• Clients: contact details, billing details, project questionnaires, brand assets, copy, logins you share so we can build your site, and our emails and call notes

• Purchases: your name, email and billing address when you buy a product, workshop or challenge. Card payments are handled by Stripe, so we never see or store your full card number

Things we collect automatically

• Cookies and similar tech: with your consent, the Meta Pixel and analytics tools record things like the pages you visit, the device and browser you use, roughly where you are, and whether you clicked through from one of our ads. More on this in the cookies section

• Email engagement: whether you open our emails and which links you click

Things we get from others

• Meta (Facebook and Instagram): if you fill in a form inside one of our ads, Meta passes us the details you entered

• Referrals: if someone recommends us, they might share your name and email with us

We don't knowingly collect data from anyone under 18, and we don't ask for sensitive information like health details.

How we use it and why we're allowed to
UK data protection law says we need a lawful reason for everything we do with your data. Here's ours.

Send you the quiz result, freebie or newsletter you signed up for = Consent (you can unsubscribe any time)
Reply to enquiries and run discovery calls = Legitimate interests (answering people who contact us), or steps before a contract
Deliver client projects, send invoices and onboard you = Contract
Keep financial and tax records = Legal obligation
Show you our ads on Instagram and Facebook and measure how they perform = Consent (via the cookie banner)
Build lookalike or custom audiences on Meta from our email list = Consent
Improve our website, content and offers using anonymous or grouped stats = Legitimate interests
Process your payment for a product, challenge or workshop = Contract

We don't sell your data, and we don't make decisions about you using fully automated systems that have legal or similarly significant effects.

 

Cookies, the Meta Pixel and ads
Cookies are small files saved on your device when you visit a website. Some are needed for the site to work. Others, like advertising cookies, only load if you say yes in our cookie banner.

• Essential cookies keep the site and forms working. These don't need consent

• Analytics cookies tell us how many people visit and which pages they read

• Advertising cookies (Meta Pixel) tell Meta when someone who saw our ad visits our site, signs up or books a call. That helps us show ads to people likely to be interested, measure whether they work, and stop showing them to people who've already signed up

​

You can change your mind any time using the cookie settings link in the footer, or by clearing cookies in your browser. You can also control the ads you see in your Facebook ad preferences and Instagram ad settings.
If you join our email list, we may upload a scrambled (hashed) version of your email to Meta to create a custom audience. Meta uses it to match you to your account, then deletes the match data. This only happens if you've agreed, and you can opt out by emailing us.

Email marketing
When you take the quiz or grab a freebie, you'll get the thing you asked for plus our emails: website tips, behind the scenes, and offers from Consortium Studio. That's the deal, and we say so on the form.

Every email has an unsubscribe link at the bottom. Click it and you're off the list straight away. We'll keep a note of your email on a suppression list so we don't accidentally add you back.

If you're a client or you've bought from us, we may send you occasional emails about similar services. You can opt out of those any time too.

Who we share it with
We use a small set of trusted tools to run the studio. They only use your data to provide their service to us.

Flodesk = Email list, sign-up forms and newsletters
Dubsado = Client portal, contracts, invoices, questionnaires and booking calls
Stripe = Payments
Meta (Facebook and Instagram) = Advertising, the Meta Pixel and lead forms
Google Workspace = Email, calendar, documents and file storage
Notion = Project and client planning
Netlify = Hosting for our quiz and internal tools
Wix Studio: website platform = Hosting for consortiumstudio.co.uk
Xero and our accountants = Bookkeeping, tax and accounts

We might also share data if the law requires it, or if the business is ever sold or restructured (the new owner would have to follow this policy).

International transfers. Some of these tools are based in the US or store data outside the UK. When that happens we rely on the UK's approved safeguards, like the UK-US data bridge or standard contractual clauses, so your data gets the same level of protection.

How long we keep it and how we protect it

Email list sign-ups = Until you unsubscribe, or after 2 years of not opening anything
Enquiries that don't turn into projects = 2 years from your last contact
Client project files and communication = 6 years after the project ends (for tax and legal reasons)
Invoices and payment records = 6 years, as HMRC requires
Logins and passwords you share for a build = Deleted when the project hands over. Please change them afterwards too
Cookie data = Up to 13 months, depending on the cookie

We keep your data in password-protected accounts with two-factor authentication turned on, and only Geenay and anyone working on your project (under a confidentiality agreement) can see it.

Your rights and how to complain
Under UK data protection law you can ask us to:

• give you a copy of the data we hold about you

• correct anything that's wrong

• delete your data

• stop or limit how we use it

• send your data to you or another company in a usable format

• stop using it for marketing (any time, no questions asked)

• withdraw your consent where we rely on it

​

Email consortiumstudiouk@gmail.com to use any of these. It's free and we'll reply within one month.

Not happy? Tell us first so we can put it right. Email the address above with "Data complaint" in the subject line. We'll acknowledge it within 30 days and keep you posted until it's sorted.

If you're still not happy, you can complain to the Information Commissioner's Office on 0303 123 1113.
Changes to this policy. We'll update this page if anything changes and show the new date at the top.

Last updated: 20 October 2026