Introduction
We take the privacy of our clients, partners and the people that they work with seriously. This privacy notice summarises what information we might collect about you, how we use this and when we might use your details to contact you. It also details your options on the personal information you provide us and what personal information we may share with others whom we work with.

Please read this notice carefully before you get in touch with us or use any of our services, and please do contact us if you have any questions or concerns regarding our privacy practices.

What’s not covered in this policy
In the course of our work, we may use third-party services including survey software, third-party platforms such as Facebook, Instagram, Twitter, Behance, LinkedIn and YouTube or represent third-party organisations such as clients.

Please note that all third-party organisations have their own privacy policies and notices, and where your personal information is gathered by them, this will adhere to their policies, not ours.

Who we are:
Name: Only Studio Ltd.
Address: 22 Lever Street, Manchester, M1 1EA
E-mail: hello@onlystudio.co.uk

The type of personal information we obtain
Depending on the nature of your relationship with us, the information that we collect and process about you can include:

— Name
— Contact details
— Financial details
— Employee data e.g. date of birth, age, occupation or passport details

How we obtain the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:

— You are a client of Only
— You have provided your information with a client of Only and your information has been shared with us by them on a lawful basis
— You have contacted us about new business
— You have applied for an open position or made an enquiry about opportunities
— You have consented to take part in one of the brand projects run by us
— You have subscribed to an email newsletter run by us

From time to time, as part of our work, we run large-scale surveys and prize giveaways which will require the collection of your personal data, including contact details, in order to fulfil those prizes.

We also collect personal information indirectly, from the following sources in the following scenarios: When Only or one of our clients have been mentioned in a public-facing forum by yourself e.g. if you’ve mentioned us in a Twitter post or post from a LinkedIn account, we might collect your Twitter handle or name/contact details on LinkedIn.

We use the information that you have given us to enable us to create powerful brand ideas for ourselves and the clients we work with, to deliver our services and to keep you up to date with them, as well as deal with any requests, queries or complaints that might be sent to us.

We won’t ever sell your personal information. Where relevant, we may share this information when we use third-party organisations to power our services, when you make something public, or when we work with clients and partners collaboratively, but we ensure that we’re careful about what we share and what our clients do with it.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

— Your consent. By choosing to contact Only, opting in to any of our brand projects or surveys or providing us with your personal information, you are giving us consent to process your information. You are able to remove your consent at any time by contacting hello@onlystudio.co.uk.
— We have a contractual obligation.
— We have a legal obligation.
— We have a legitimate interest.

How we store your personal information
We only retain your personal details for as long as we are performing the activities detailed above, or have a legitimate reason to retain it. We don’t hold your information for any longer than we have to, and will always consider its sensitivity and the risks to you if someone uses or shares this information without permission.

All personal information will be deleted once there is no requirement for us to retain it.

Your data protection rights
Under data protection law, you have rights including:

— Your right of access: You have the right to ask us for copies of your personal information.
— Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
— Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
— Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
— Your right to object to processing: You have the the right to object to the processing of your personal information in certain circumstances.
— Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at hello@onlystudio.co.uk if you wish to make a request.

How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at hello@onlystudio.co.uk. You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk