Legal
This notice explains how IQ Studios handles personal data — whether you visit our website, make an enquiry, become a client, or deal with us as a supplier or business contact.
IQ Studios (UK) Ltd ("IQ Studios", "we", "us") is the controller of the personal data described in this notice.
This notice covers the personal data we hold about:
If you deal with us in a context not described here and you would like to know how your personal data is handled, please contact us at the address above.
If you contact us through the enquiry form on our website, we collect:
We use your contact details and message to respond to your enquiry and to discuss your requirements. We use your IP address to protect the form against automated abuse and spam. Where a submission is blocked by our automated anti-spam checks, we log the IP address and the reason.
If you telephone or email us directly, we hold the contact details and correspondence you provide.
If you become a client, or if you deal with us as a supplier or business contact, we hold the information we need to work with you. That typically includes your name and role, your organisation, your contact details, our correspondence with you, and details of bookings, engagements, orders, invoices and payments.
We use this information to respond to and progress enquiries, to arrange and deliver studio bookings and production work, to manage our engagement with you, to raise and settle invoices, to keep proper business and accounting records, and for ordinary business administration.
Where you are a contact at an organisation we deal with, we may receive your details from that organisation or from a colleague of yours rather than from you directly.
Our website uses cookies and similar technologies.
Strictly necessary cookies are needed for the website to work — for example to maintain a secure session where you sign in to a restricted area of the site. These do not require your consent.
Analytics and advertising cookies help us understand how the website is used and measure the effectiveness of our advertising. These include Google Analytics and Google Ads conversion tracking, deployed through Google Tag Manager. They are used only where you have given your consent, and you can withdraw that consent at any time through our cookie settings.
Our hosting provider maintains standard server logs, which record IP addresses, the pages requested, timestamps and browser user-agent strings. We use these to operate, secure, monitor and troubleshoot the website.
| What we do | Lawful basis |
|---|---|
| Responding to your enquiry and discussing your requirements | Legitimate interests — dealing with enquiries about our services. Where an enquiry leads to an engagement, performance of a contract |
| Arranging and delivering bookings and production work, and managing our engagement with you | Performance of a contract, or legitimate interests where our contract is with your organisation rather than with you personally |
| Dealing with suppliers and business contacts, and ordinary business administration | Legitimate interests — running our business |
| Keeping business and accounting records | Legal obligation, and legitimate interests in maintaining proper records |
| Protecting our forms and website against spam, abuse and attack | Legitimate interests — securing our systems and preventing misuse |
| Operating and troubleshooting the website, including server logs | Legitimate interests — running a functioning, secure website |
| Analytics and advertising cookies | Consent |
| Complying with legal or regulatory obligations, and responding to lawful requests | Legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your interests, rights and freedoms. You can ask us for further information about that assessment, and you have the right to object to processing on this basis (see section 11).
We do not sell your personal data. We may disclose it, where necessary and lawful, to:
Where a service provider acts as our processor, it processes personal data on our instructions and is subject to contractual obligations concerning confidentiality and security. Other recipients may process personal data as controllers in their own right.
Where personal data is transferred outside the United Kingdom, we use a transfer mechanism recognised under UK data protection law. Depending on the circumstances, this may include UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses, together with any required transfer risk assessment. You can ask us which mechanism applies to a particular transfer.
| Information | Retention period |
|---|---|
| Website enquiries and related correspondence | 24 months from our last meaningful contact with you, unless you become a client, in which case we retain records in line with our client records retention |
| Client records and correspondence | 6 years after the engagement ends, or longer where legally required |
| Anti-spam and security logs | 90 days, unless retained longer in connection with a security incident or an actual or anticipated legal claim |
| Server logs | Retained by our hosting provider for up to 4 days |
| Analytics data | In line with the retention period configured in Google Analytics |
Where we no longer need personal data, we delete it or, where appropriate, anonymise it.
You have the right to:
These rights are not absolute, and in some circumstances we may need to retain information — for example where it is needed to comply with a legal obligation or to establish, exercise or defend legal rights. If we cannot meet a request in full, we will explain why.
To exercise any of these rights, contact info@iqstudios.co.uk. We will respond within one month, and will tell you if we need longer.
We do not make decisions about you by solely automated means, and we do not carry out profiling that has a legal or similarly significant effect on you.
Automated checks are applied to our forms to detect and block spam and automated abuse. If a legitimate enquiry is blocked, you can contact us directly at info@iqstudios.co.uk.
Our website is served over an encrypted connection. Access to personal data within our organisation is limited to those who need it, and our providers are contractually required to maintain appropriate security measures.
You do not have to give us your personal data, but we cannot respond to an enquiry, arrange a booking or manage an engagement without the information described above.
We may update this notice from time to time. The version number and date at the top of this page show when it was last changed.
If you have a concern or complaint about how we have handled your personal data, you can make a data protection complaint by contacting us at info@iqstudios.co.uk. We will acknowledge your complaint within 30 days and will investigate and respond without undue delay, keeping you informed as appropriate.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113