The short version.

Soda Creative Studios Ltd ("Soda", "we", "us") is a UK creative technology studio. For personal data handled through this website and our related business tools, Soda is the data controller.

You can contact us at [email protected].

When you use our contact form, we collect the information you choose to provide: your name, email address, company or project name, project type, message, budget range and deadline.

Our hosting and security systems may also process technical information such as an IP address, browser details, timestamps and request logs to operate and protect the website.

We use contact details and project information to respond to enquiries, discuss and deliver work, keep appropriate business records, and protect the website from abuse.

We do not sell personal information. We do not use information submitted through the contact form for unrelated marketing without a lawful basis and, where required, your consent.

Soda uses an internal business-finance workflow to identify invoices, receipts and expense records in authorised business mailboxes, and to reconcile them with accounting records.

Where authorised, this workflow may read relevant email content and attachments, including supplier names, dates, amounts, currencies, invoice details and the last four digits of a payment card where shown. It is used for Soda's own accounting administration, not to provide a service to the public.

Finance records are stored in Soda's controlled business-finance systems and local business archive. Access is limited to authorised people and service providers who need it for accounting, administration or technical operation.

We use hosting, security, email-delivery and business-software providers to operate the website and business. These providers process information only as needed to provide their services and under their own applicable terms and privacy documentation.

Depending on the service used, information may be processed in the UK, the European Economic Area or other countries with appropriate contractual or legal safeguards.

The website may use essential technologies required for hosting, security and basic functionality. If we introduce non-essential analytics, advertising or similar cookies, we will provide the appropriate notice and consent choices where required.

We keep information only for as long as reasonably necessary for the purpose it was collected, including responding to an enquiry, delivering work, meeting legal and accounting obligations, resolving disputes and maintaining security records.

We use proportionate technical and organisational safeguards, but no internet transmission or storage system can be guaranteed completely secure.

Under UK data-protection law, you may have rights to access, correct, delete or restrict the use of your personal information, to object to certain processing, and to receive a copy of information you provided. Where processing relies on consent, you may withdraw it.

To exercise a right, contact [email protected]. You can also complain to the UK's Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.

We may update this policy when our website, business processes or legal obligations change. The current version will be published on this page.