Privacy Policy

This policy explains how Black Stag handles personal information when you visit our website, contact us or enquire about our creative services.

1. Who we are

Black Stag is an independent creative studio based in Scotland. For the personal information described in this policy, Black Stag is the data controller.

For privacy questions or requests, email hello@blackstagcreativestudio.co.uk.

2. Information we collect

We may collect information you give us through the enquiry form, email, telephone or WhatsApp, including:

your name, email address and telephone number;
your company name and the service you are interested in;
project details, messages and correspondence; and
documents, images or other files you choose to attach.

Our website and hosting providers may also process limited technical information such as IP address, browser type, device information, security events and request logs.

Please do not upload confidential, sensitive or special-category personal information unless it is genuinely necessary and we have agreed that you should send it.

3. How we use your information

We use personal information to:

respond to enquiries and understand your project;
prepare proposals and take steps towards entering a contract;
provide and manage services where you become a client;
maintain the security and performance of the website; and
meet legal, accounting and regulatory obligations.

Our lawful bases will usually be taking steps at your request before a contract, performing a contract, complying with a legal obligation, or our legitimate interests in operating and improving the studio. Where consent is required, you may withdraw it at any time.

4. Who receives your information

We use trusted service providers to operate the website and handle communications. These may include website hosting and security providers, FormSubmit for processing website enquiries and attachments, email providers, and professional advisers. They receive information only where needed to provide their service or meet a legal requirement.

If you choose the WhatsApp link, your use of WhatsApp is governed by WhatsApp’s own privacy information. We do not sell personal information.

Some providers may process information outside the UK. Where this happens, we seek to use providers and safeguards that meet applicable UK data-protection requirements.

5. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose it was collected. Initial enquiries that do not become client work are generally retained for no longer than 24 months. Client, contractual and financial records may be kept longer where required for legal, tax, insurance or record-keeping purposes.

Attachments sent through the enquiry form become part of the enquiry email and should only contain information relevant to the proposed project.

6. Your rights

Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; receive a portable copy; and withdraw consent. These rights are not absolute and may depend on the lawful basis being used.

To exercise a right, email us using the address above. You may also complain to the Information Commissioner’s Office.

7. Security and updates

We use reasonable technical and organisational measures to protect personal information. No internet transmission or storage system can be guaranteed completely secure, so please use care when choosing what to send.