Privacy Policy

612 Studio is the studio brand of BOTTEGA612 LTD, a company registered in England & Wales (no. 17053664), registered office 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB. We are the data controller for the personal data described here, registered with the UK Information Commissioner's Office (registration ZC181677). Contact: simon@612.studio.

Last updated: 16 July 2026.

What we collect, and why

• When you contact us or apply to work with us - your name, email, company, and what you tell us about your project. We use it to reply, assess fit, and run the engagement. Legal basis: legitimate interests, then performance of a contract.
• When you buy an engagement - billing details and payment. Payments are processed by Stripe; we never see or store your card number. Where you consent at checkout, Stripe retains your payment method for future engagement billing you separately authorize. Legal basis: performance of a contract; legal obligation (accounting records).
• During an engagement - the documents, data and materials you share with us so we can do the work. Where we process personal data on your behalf inside a product we build for you, we act as your processor under a Data Processing Agreement. Legal basis: performance of a contract.
• This website sets no cookies and runs no analytics or tracking.

Who we share it with

Only the service providers we run the studio on, under their own safeguards: Stripe (payments), Google Workspace (email, documents), GitHub (code, where relevant to an engagement). We do not sell personal data, and we do not use your data to train any general-purpose AI model. Engagement-specific sub-processors are listed in the applicable Data Processing Agreement.

International transfers

Some providers process data in the United States. Where they do, transfers are protected by the UK Extension to the EU-US Data Privacy Framework (where the provider is certified) or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Enquiries: up to 2 years. Engagement records and contracts: 6 years after the engagement ends (legal and accounting obligations). Engagement working data: deleted or returned at handover, per the Data Processing Agreement.

Your rights

Under UK GDPR you can ask us for access to, correction of, or deletion of your personal data, object to or restrict processing, and take your data elsewhere. Email simon@612.studio and we'll act on it. You can also complain to the ICO (ico.org.uk).

Changes

If this policy changes, the new version appears on this page with an updated date.