Privacy Policy
How By Dora Studio collects, uses and protects personal information.
Last updated: 28 August 2026
By Dora Studio respects your privacy. This policy explains what personal information I collect through this website and in the course of enquiries and client work, why I use it, how long I keep it and the choices you have.
1. Who is responsible for your information?
By Dora Studio is responsible for the personal information described in this policy. If you have any questions about your data, please contact:
Email: hello@bydorastudio.com
Website: bydorastudio.com
2. What information I collect
Depending on how you contact or work with me, I may collect:
- your name, email address, telephone number and business name;
- information you provide in the enquiry form, by email, WhatsApp, Instagram or during project conversations;
- project information, briefs, feedback, files, brand assets and other materials you choose to share;
- quotes, invoices, payment records and information needed for bookkeeping and tax records;
- basic technical information generated when you use the website, such as IP address, browser information, security logs or server records created by the hosting provider.
Please do not send sensitive personal information through the website unless it is genuinely necessary for a project and we have agreed how it will be handled.
3. How I use your information and my lawful basis
| Purpose | Lawful basis |
|---|---|
| To respond to an enquiry, discuss your project, prepare a quote or take other steps you ask me to take before a contract. | Steps at your request before entering into a contract, and where appropriate legitimate interests in running my business and responding to business enquiries. |
| To provide branding, website, strategy or related services once you become a client. | Performance of a contract. |
| To issue invoices, keep accounting records and meet tax or other legal requirements. | Legal obligation. |
| To keep appropriate business records, protect the website and systems, prevent misuse and deal with disputes or legal claims. | Legitimate interests in operating and protecting my business. |
I do not use enquiry details for an email newsletter or unrelated marketing unless you have separately asked to receive it or another lawful basis clearly applies.
4. Contact forms, email, WhatsApp and Instagram
If you contact me through the website, email, WhatsApp or Instagram, I use the information you provide to respond and, where relevant, to discuss or deliver your project. Messages sent through third-party platforms are also processed under those platforms' own privacy terms.
5. Google Fonts and website hosting
This website currently uses Google Fonts to display Fraunces and Instrument Sans. When these fonts are loaded from Google's servers, your browser may send technical information such as your IP address and browser details to Google. The website is also hosted by a third-party hosting provider, which may process technical logs needed to deliver and secure the site.
If the fonts are later hosted locally, this policy will be updated accordingly.
6. Who I may share information with
I do not sell personal information. I may share information only where reasonably necessary with service providers that help me run the studio, for example:
- website hosting and technical service providers;
- email, cloud storage, project-management or communications providers;
- accounting or professional advisers where needed;
- specialist contractors or collaborators involved in a project, where this has been agreed or is reasonably necessary;
- public authorities or other parties where I am legally required to do so.
7. International transfers
Some technology providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, I expect the relevant provider to use an approved transfer mechanism or other lawful safeguard.
8. How long I keep information
I keep personal information only for as long as reasonably needed for the purpose it was collected for. As a general guide:
- enquiries that do not become projects: usually up to 24 months after the last meaningful contact;
- client project and contract records: usually up to 6 years after the project ends, where needed for contractual, accounting or legal purposes;
- financial and tax records: for the period required by applicable law;
- project files: according to the project agreement and practical backup/archiving needs.
I may keep information for longer where there is a legal dispute, an outstanding payment or another legitimate legal reason.
9. Your data-protection rights
Depending on the circumstances, you may have the right to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, data portability, or to object to certain processing. Where processing is based on consent, you can withdraw that consent at any time.
To exercise a right, email hello@bydorastudio.com. I may need to confirm your identity before acting on a request.
10. Complaints
If you are unhappy with how your information has been handled, please contact me first so I can try to resolve the issue. You also have the right to complain to the UK Information Commissioner's Office (ICO).
Information Commissioner's Office — make a complaint
11. Security
I take reasonable technical and organisational steps to protect personal information. No website, email service or online system can be guaranteed to be completely secure, so please avoid sending information that is not needed for your enquiry or project.
12. Changes to this policy
I may update this policy if the website, services or technology I use changes. The latest version will always be published on this page with the updated date.