Privacy policy

Draft. This policy is a working draft prepared during the website rebuild. It should be reviewed by a UK-qualified solicitor before the site launches on its permanent domain.

Who we are

“We”, “us”, “our” refers to Richard Royle, sole proprietor of Studio 67, Unit 19 & 20, The Parade Shops, Shrewsbury, Shropshire, SY1 1XJ. We are the data controller for any personal information collected through this website.

For any privacy-related question, write to art@studio67shrewsbury.co.uk.

What we collect, and when

When you reserve a stool at 67 Lates

The reservation form on this site asks for:

• Your name
• An email address we can reply to
• The date you’d like to visit and the size of your party
• Optional: how you heard about us, and any notes you want to send

When you send a print or artwork enquiry

The enquiry form asks for:

• Your name
• A contact email
• The message you write

When you click an enquire button on an artwork

That opens your email client with a pre-filled message. We only see what you choose to send us by email.

What we don’t collect

This site doesn’t use analytics or advertising cookies. We don’t track which pages you visit, how long you stay, or where you came from. The only browser storage we set is a single non-tracking preference (“day” or “night”) so the site remembers which mode you chose last time.

Why we’re allowed to use it

Under UK GDPR we rely on two legal bases:

• Performance of a contract — for reservations, we need your name and email to confirm and manage the booking.
• Legitimate interests— for enquiries, replying to a question you have chosen to send us is in our shared interest, and we don’t use the information for anything else.

Who else sees it

We use a small number of third parties to operate the site. They process data on our instructions only, under written agreements:

• Vercel hosts the site and the database that stores reservations and enquiries.
• An email-sending provider (to be confirmed before launch — Resend, Postmark, or AWS SES) delivers any acknowledgement emails we send you.
• Meta (Facebook / Instagram)— only if you have chosen to start a conversation with us through Facebook Messenger or Instagram. Messages remain governed by Meta’s own privacy policy in addition to ours.

We never sell your information, and we don’t share it with anyone for marketing purposes.

How long we keep it

• Reservation records — 24 months from the visit date, so we can recognise returning regulars and follow up if needed.
• Enquiry conversations — 24 months from the last message in the thread.
• Email correspondence — kept in our inbox under our retention schedule.

After those periods we delete the records, or anonymise them where we want to keep aggregate counts.

Your rights

UK GDPR gives you a number of rights over the information we hold about you:

• Access — ask for a copy of what we hold
• Correction— ask us to fix anything that’s wrong
• Deletion— ask us to remove what we hold (the “right to be forgotten”)
• Restriction — ask us to pause processing while we resolve a question
• Portability — receive a machine-readable copy you can take elsewhere
• Objection — object to our processing, particularly any based on legitimate interests

To exercise any of these, email art@studio67shrewsbury.co.uk. We’ll respond within 30 days.

If you’re not happy with how we’ve handled your data

Please write to us first so we can put it right. If you’re still not satisfied, you can raise the matter with the Information Commissioner’s Office at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.

Children

This site isn’t aimed at children. We don’t knowingly collect personal information from anyone under 13. If you think a child has sent us information, write to us and we’ll delete it.

Changes to this policy

We’ll update this page if anything material changes. The “last updated” date at the top is the easiest way to tell. If the change is significant we’ll write to anyone whose details we currently hold.