Privacy Policy

Last updated: 15 June 2026
Effective date: 15 June 2026

1. Who we are

This privacy policy explains how Onhold Studio Connect Ltd ("Onhold Studio", "we", "us" or "our") collects, uses, shares and protects your personal data when you use our website at https://www.onholdstudio.co.uk/ (the "Service") or otherwise deal with us.

We are the data controller responsible for your personal data.

Company: Onhold Studio Connect Ltd
Registered address: 56-60 Woodside Business Park, Birkenhead, Merseyside CH41 1EL, United Kingdom
Email: info@onholdstudio.co.uk
Phone: 0333 990 0009
ICO registration number: ZA115080

We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025.

2. What this policy covers

This policy applies to personal data we collect through our website, through enquiry and contact forms, and in the course of providing our services. It does not cover third-party websites or services that we link to, which have their own privacy policies.

3. The personal data we collect

Depending on how you interact with us, we may collect:

Contact and enquiry details you give us through our website forms, by email or by phone, such as your name, company name, email address, telephone number and the content of your message.
Customer and account details needed to provide our services, including billing contact details and records of the services we provide to you.
Payment information where you become a customer. Payments are processed through Stripe via our Zoho CRM system. We do not collect or store your full card details on our website.
Technical and usage data, such as your IP address, browser type, device information and how you use our website, collected through cookies and similar technologies.

We do not collect special category data (for example data about health, ethnicity or religion) through the website.

4. How we collect your data

We collect personal data:

Directly from you, when you complete a form on our website (using WPForms), email or call us, or sign up to or purchase our services.
Automatically, through cookies and analytics tools when you use our website (see section 7).

5. Why we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for using your personal data. The bases we rely on are set out below.

Responding to enquiries. When you contact us through a form, by email or by phone, we use your details to reply and discuss your requirements. Lawful basis: legitimate interests (to respond to and manage enquiries) and, where you are asking about our services, taking steps at your request before entering into a contract.
Providing our services. Where you are a customer, we use your data to deliver and manage the services we provide. Lawful basis: performance of a contract.
Processing payments and keeping financial records. We process payments through Stripe via Zoho CRM and keep invoices and related records. Lawful basis: performance of a contract and compliance with a legal obligation (tax and accounting law).
Marketing. We may send you information about our services. Where you are an existing customer we rely on legitimate interests (under the PECR "soft opt-in") and you can opt out at any time. Where you are not an existing customer we will only send marketing where you have consented. Lawful basis: legitimate interests or consent.
Testimonials. We only publish a testimonial that names or identifies you with your consent. Lawful basis: consent.
Website analytics and advertising. We use analytics and advertising cookies to understand and improve how our website is used and to measure our advertising. Lawful basis: consent (see section 7).

Where we rely on consent, you can withdraw it at any time by contacting us at info@onholdstudio.co.uk. Where we rely on legitimate interests, you can object to that processing (see section 10).

6. Who we share your data with

We do not sell or rent your personal data. We share it only with the following categories of recipient, and only as needed:

Zoho (our CRM and business systems provider), which processes form and enquiry data and customer records on our behalf.
Stripe, which processes payments on our behalf.
Google (Google Analytics and Google Ads), which provides website analytics and advertising measurement.
ANS Group, which provides our website hosting.
Professional advisers, regulators and authorities, where we are legally required to share data or to establish, exercise or defend legal claims.

Our processors act on our instructions under contracts that require them to keep your data secure and to use it only for the purposes we specify.

7. Cookies and similar technologies

Cookies are small files placed on your device that help a website function and allow us to understand how it is used.

We use:

Strictly necessary cookies, which are needed for the website to work. These do not require your consent.
Analytics cookies (Google Analytics and Zoho PageSense), which help us understand how visitors use the site.
Advertising cookies (Google Ads), which we use from time to time to measure the performance of our advertising.

We only set analytics and advertising cookies where you have given consent through our cookie banner. You can change or withdraw your cookie preferences at any time using the cookie settings on our website, or by adjusting your browser settings. Withdrawing consent will not affect cookies already placed, but they will not be renewed.

For more detail on managing cookies, please see our Cookie Policy.

8. International transfers

Some of our providers, including Stripe and Google, may process personal data outside the UK, including in the United States. Where data is transferred outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the recipient is certified) or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

9. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy.

Enquiries that do not become customers: up to 24 months from your last contact with us.
Customer relationship records: for the duration of the relationship and up to 6 years after it ends.
Financial and transaction records (invoices, payment records): 6 years, to meet HMRC and company law requirements.
Marketing preferences and consent records: for as long as we hold your data, so that we can honour your choices.

When data is no longer needed we securely delete or anonymise it.

10. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

The right to be informed about how we use your data, as set out in this policy.
The right of access to a copy of the personal data we hold about you. The first copy is provided free of charge.
The right to rectification of inaccurate or incomplete data.
The right to erasure of your data in certain circumstances.
The right to restrict processing in certain circumstances.
The right to data portability, allowing you to obtain and reuse your data in certain circumstances.
The right to object to processing based on legitimate interests, and to object to direct marketing at any time.
Rights relating to automated decision-making and profiling. We do not make decisions about you based solely on automated processing.

To exercise any of these rights, contact us at info@onholdstudio.co.uk. We will respond within one month. For security we may ask you to verify your identity before we act on your request. There is no charge for exercising these rights, although we may charge a reasonable fee, or refuse to act, where a request is manifestly unfounded or excessive.

11. How to complain

If you have any concerns about how we handle your personal data, please contact us first at info@onholdstudio.co.uk so we can try to put things right.

You also have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk/make-a-complaint/
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

12. Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it.

13. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. While we work hard to protect your data, no method of transmission over the internet is completely secure.

14. Changes to this policy

We review this policy regularly and may update it from time to time. Any changes will be posted on this page with a revised "last updated" date. Significant changes will be highlighted where appropriate.