Privacy Policy

Last updated: 29 July 2026

Who we are

This website, common-studio.co.uk, is operated by Common Studio, the trading name of Jed Hackling, a sole trader based in England, of Turnpike House, Southend-on-Sea, Leigh-on-Sea, SS9 2UA.

For data protection purposes, Jed Hackling trading as Common Studio is the controller of the personal information described in this policy.

If you have questions about this policy or how your information is handled, contact jh@common-studio.co.uk.

What information we collect

If you contact us through our website form or email us directly, we collect the information you provide. This will typically include your name, business name, website address, email address and the contents of your message.

If you become a client or discuss a potential project with us, we may also collect the business and project information needed to provide a proposal, communicate with you, deliver the work and maintain appropriate business records.

For limited business outreach, we may collect:

• a business contact's name
• job title or business role
• work email address
• employer and corporate entity information
• the public source and date of those details
• relevant public information about the company's website
• whether and when we contacted the business
• reply, objection, opt-out and suppression status

We do not seek information about a business contact's private life or use special-category personal data for outreach.

We do not currently use tracking cookies or analytics that identify you personally. We do not collect information automatically beyond standard, anonymous web-server logs handled by our hosting provider.

How we obtain business outreach information

We obtain business outreach information from public sources such as:

• the business's official website
• Companies House
• public professional pages that relate to the person's business role
• other reputable public business sources used to confirm a role or corporate status

OpenAI/Codex and Anthropic/Claude may help us find, summarise and check public business information. We verify important details against the underlying public source rather than treating AI-generated output as evidence by itself.

Why we use your information

We use personal information:

• to respond when you contact us and discuss a potential project
• to prepare proposals and take steps you request before entering a contract
• to provide and manage services when we work together
• to maintain appropriate legal and business records
• to identify suitable corporate businesses that may benefit from a Common Studio Website Refresh
• to send limited, relevant business-to-business outreach to an appropriate person at those businesses
• to keep a minimal record when someone asks us not to contact them again

When you contact us or become a client, our lawful basis will depend on the context. We may process information to take steps at your request before entering a contract, to perform a contract, to comply with a legal obligation or for our legitimate interests in responding to enquiries and operating Common Studio.

For carefully targeted business outreach to people working at limited companies, LLPs and other corporate bodies, we rely on our legitimate interests in finding suitable clients and introducing a relevant business service. We assess this use to make sure it is proportionate, has a limited privacy impact and does not override your rights.

We do not sell or rent personal information.

Business outreach

We sometimes use public business information to identify established UK corporate businesses whose websites may benefit from a focused refresh.

We use this information only where we believe the person's role is relevant and the organisation is a corporate business that may reasonably benefit from the service. We do not send unsolicited outreach to sole traders, ordinary partnerships or uncertain subscriber types unless the appropriate consent or another valid route has been established.

OpenAI/Codex and Anthropic/Claude may help retrieve, analyse, draft or review public business information and outreach material. When a named contact or company record is included in a prompt, file or review task, those services may process that information to provide the requested service.

Every message in the initial pilot is reviewed before sending. We do not use outreach information to make decisions that have legal or similarly significant effects on you.

Your right to object to direct marketing

You can ask us to stop using your personal information for direct marketing at any time. This right is absolute.

Reply to any outreach email or contact jh@common-studio.co.uk, and we will stop. You do not need to use any particular wording.

When you object, we keep only the minimum information needed on a suppression list so that we do not contact you again by mistake.

How we store your information

Enquiries sent through our website form are processed by Web3Forms and forwarded to our business email account hosted with Google Workspace. Web3Forms may retain submission data temporarily in accordance with its service terms. The resulting email is stored in Google Workspace like other business email.

Outreach records may also be held in a restricted register used to research and review prospects, manage sending, record responses and maintain the suppression list.

We take reasonable steps to limit access to the people and providers who need the information for these purposes.

Who else sees your information

We use a small number of service providers to operate the website, email and outreach workflow. Depending on how you interact with us, these may include:

• Google Workspace, which hosts our business email
• Cloudflare, which hosts and delivers this website
• Web3Forms, which processes website-form submissions and forwards them to our email account
• OpenAI/Codex, which may help us find and analyse public business information, check drafts and operate the outreach workflow
• Anthropic/Claude, which may help us find and analyse public business information and prepare or review outreach material

Although the AI tools can retrieve or generate information for us, they may also process information that we include in prompts, files and review tasks.

These providers process information on our behalf or under their applicable service terms. We do not sell your information or share it with other businesses for their own marketing.

International data transfers

Some of our service providers may process information outside the United Kingdom. Where data protection law requires it, these transfers are protected by recognised safeguards.

How long we keep your information

We keep enquiry and client information only for as long as reasonably needed to respond, provide services and meet our legal or business-record obligations.

For business outreach, we keep an unresponsive prospect record for up to six months after the last contact. We may keep relevant information longer where a genuine business conversation or client relationship develops.

If you ask us not to contact you, we keep the minimum details needed on a suppression list for as long as reasonably necessary to respect your request in future.

Cookies

This website does not currently set tracking, analytics or advertising cookies.

If that changes, for example if we add privacy-friendly analytics, we will update this policy and, where required, ask for consent first.

Your data protection rights

Depending on the circumstances, you may have the right to:

• ask what personal information we hold about you
• ask us to correct inaccurate information
• ask us to delete your information
• ask us to restrict how we use your information
• object to how we use your information
• ask for a copy of certain information in a portable format

The right to object to the use of your personal information for direct marketing is absolute.

To exercise a right, contact jh@common-studio.co.uk. We may need to confirm your identity before completing a request.

You also have the right to complain to the Information Commissioner's Office. Information about making a complaint is available at ico.org.uk/make-a-complaint.

Changes to this policy

We may update this policy as the website, services or outreach workflow changes. Any changes will be posted on this page with a revised "last updated" date.