Privacy Policy
Last updated: 11 January 2026
1. Introduction
Koseti Digital Studio ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website koseti.com (the "Site") or engage our services.
We are registered in England and Wales and operate in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Please read this Privacy Policy carefully. By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.
2. Data Controller
For the purposes of applicable data protection legislation, the data controller is:
Koseti Digital Studio
Middlesbrough, England, United Kingdom
Email: hello@koseti.com
3. Information We Collect
3.1 Personal Data You Provide
We may collect personal data that you voluntarily provide when you:
- Complete our contact form or enquiry forms
- Subscribe to our newsletter or marketing communications
- Request a quote or consultation
- Enter into a contract with us for services
- Communicate with us via email, telephone, or other means
This information may include:
- Identity Data: First name, last name, title
- Contact Data: Email address, telephone number, postal address
- Business Data: Company name, job title, business requirements
- Financial Data: Bank account details, payment card details (processed securely through third-party payment processors)
- Communications Data: Your correspondence with us and any feedback you provide
3.2 Automatically Collected Data
When you visit our Site, we automatically collect certain information, including:
- Technical Data: IP address, browser type and version, operating system, device type, screen resolution
- Usage Data: Pages visited, time spent on pages, navigation paths, referring website, exit pages
- Location Data: General geographic location based on IP address
This information is collected through cookies and similar tracking technologies. Please see our Cookie Policy for more information.
4. Legal Basis for Processing
We process your personal data on the following legal grounds under UK GDPR:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications)
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests
5. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and provide customer support
- To deliver the services you have requested
- To process and manage contracts and payments
- To send you service-related communications
- To send marketing communications where you have opted in
- To improve our website, products, and services
- To analyse website usage and optimise user experience
- To detect, prevent, and address technical issues or security threats
- To comply with legal obligations and protect our legal rights
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal data to third parties. We may share your information with:
- Service Providers: Trusted third parties who assist us in operating our website, conducting our business, or servicing you (e.g., hosting providers, email service providers, payment processors). These parties are contractually obligated to keep your information confidential.
- Professional Advisers: Lawyers, accountants, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
- Legal Requirements: When required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In connection with any merger, acquisition, or sale of company assets, your personal data may be transferred as part of that transaction.
7. International Data Transfers
Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:
- Transfers to countries with adequacy decisions from the UK Government
- Standard contractual clauses approved by the UK Information Commissioner's Office (ICO)
- Binding corporate rules where applicable
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
The retention periods we apply are:
- Contact enquiries: 2 years from last contact
- Client records: 7 years after the end of the business relationship (for legal and accounting purposes)
- Marketing data: Until you unsubscribe or withdraw consent
- Website analytics: 26 months (Google Analytics default)
9. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
- Right to Restriction: You have the right to request restriction of processing of your personal data.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing of your personal data, including for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at hello@koseti.com. We will respond to your request within one month. There is no fee for making a request unless your request is clearly unfounded or excessive.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:
- SSL/TLS encryption for data in transit
- Secure hosting with reputable providers
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
11. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.
12. Children's Privacy
Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Privacy Policy on this page with a revised "Last updated" date. We encourage you to review this Privacy Policy periodically.
Material changes will be communicated to you via email (if we have your email address) or through a prominent notice on our Site.
14. Complaints
If you have any concerns about how we handle your personal data, please contact us first at hello@koseti.com. We will do our best to resolve your concerns.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
15. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Koseti Digital Studio
Email: hello@koseti.com
Address: Middlesbrough, England, United Kingdom