Privacy Policy

Privacy Policy

Last Updated: July 2026

Studio Phini Ltd ("Phini," "we," "our," or "us") is committed to handling your personal data with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights under UK GDPR.

If you have any questions, contact us at studio@phini.com

1. Who We Are

Studio Phini Ltd is the data controller responsible for your personal data. We are registered in England and Wales.

Registered address: Studio 503, Leroy House, 426 Essex Road, London, N1 3BT

Studio Phini Ltd is registered with the Information Commissioner's Office (ICO) as a data controller in accordance with UK GDPR.

2. What Data We Collect

2.1 Information You Provide

  • Name, email address, and phone number

  • Delivery and billing addresses

  • Body measurements provided for project purposes

  • Communications with our team via email, WhatsApp, or in person

  • Payment information, processed securely via Stripe

2.2 Information Collected Automatically

  • Device information (e.g. browser type, operating system)

  • IP address and approximate location data

  • Website usage data (e.g. pages visited, time on site) via Google Analytics

2.3 Information from Third Parties

  • Where you subscribe to our mailing list, your email address and preferences are stored via Mailchimp

3. How We Use Your Data

3.1 Project Delivery To manage your booking, communicate throughout your project, process payments, and coordinate the return of your garment. This is necessary for the performance of our contract with you.

3.2 Marketing Communications With your consent, we may send you updates, news, and information about Phini's services via email. You can withdraw consent and unsubscribe at any time using the link in any marketing email or by contacting us directly.

3.3 Website Analytics We use Google Analytics to understand how visitors use phini.com, which helps us improve our website and services. This is processed on the basis of our legitimate interests.

3.4 Legal Compliance & Fraud Prevention We may process your data where required to comply with a legal obligation, or where necessary to prevent fraud or misuse of our services.

3.5 Photography & Promotional Use Where you have agreed to our Terms & Conditions and Client Agreement, images relating to your project may be used for promotional purposes including press, social media, and advertising. This is processed on the basis of your consent, which may be withdrawn at any time by contacting us.

4. Legal Bases for Processing

Under UK GDPR, we process your personal data on the following legal bases:

  • Contractual Necessity — to deliver the services you have engaged us for

  • Consent — for marketing communications and promotional use of project imagery

  • Legitimate Interests — for website analytics, fraud prevention, and business improvement, where these do not override your rights

  • Legal Obligation — where we are required to process data to comply with applicable law

5. Sharing Your Data

We do not sell your personal data. We share it only where necessary:

  • Stripe — to process payments securely

  • Mailchimp — to manage and send marketing communications

  • Google Analytics — to analyse website traffic and usage

  • Shipping providers — to coordinate the collection and return of your garment

  • Legal or regulatory authorities — where required by law

All third-party providers are required to handle your data securely and in accordance with applicable data protection law. Where providers are based outside the UK, appropriate safeguards are in place.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law:

  • Client and project records are retained for seven years in line with standard financial and legal requirements

  • Marketing data is retained until you withdraw consent or unsubscribe

  • Website analytics data is retained in accordance with Google Analytics' standard retention settings

  • Account deletion or data removal requests will be processed within 30 days of receipt

Once data is no longer required, it is securely deleted or anonymised.

7. Cookies

7.1 What Are Cookies? Cookies are small files stored on your device when you visit a website. They help us understand how our site is used and improve your experience.

7.2 Cookies We Use

  • Essential Cookies — required for the website to function correctly

  • Performance Cookies — used via Google Analytics to analyse traffic and usage patterns

  • Preference Cookies — to remember your settings and choices

7.3 Managing Cookies You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of phini.com. Where required by law, we will request your consent before placing non-essential cookies.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you

  • Rectification — request correction of any inaccurate or incomplete data

  • Erasure — request deletion of your data, subject to legal retention requirements

  • Restriction — request that we limit how we process your data in certain circumstances

  • Portability — receive your data in a structured, commonly used format

  • Object — object to processing based on legitimate interests, including direct marketing

  • Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at studio@phini.com. We will respond within one calendar month.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Security

Studio Phini Ltd takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. While we maintain high standards of data security, no system can guarantee absolute protection. In the event of a data breach that is likely to affect your rights, we will notify you and the ICO in accordance with our legal obligations.

10. Third-Party Links

Our website may contain links to third-party websites. Studio Phini Ltd is not responsible for the privacy practices of those sites and recommends you review their privacy policies independently.

11. Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in our practices or legal requirements. The date of the most recent update is noted at the top of this document. Continued use of our website or services following any update constitutes acceptance of the revised policy. Where changes are material, we will notify you directly.

Studio Phini Ltd © 2026

studio@phini.com