Privacy Policy
We collect very little. Contact details when you email us or fill in a form, newsletter details if you subscribe, and anonymised analytics about how the site is used. We don't sell data, we don't run advertising trackers on this site, and you can ask us to delete what we hold at any time.
What we collect and why
We colleWhen you contact us Name, email address, company, and whatever you put in the message. We use it to reply and, if we end up working together, to run the engagement. Lawful basis: legitimate interests (responding to an enquiry), and later contract performance. Kept for: three years after the last contact, unless you become a client.ct very little. Contact details when you email us or fill in a form, newsletter details if you subscribe, and anonymised analytics about how the site is used. We don't sell data, we don't run advertising trackers on this site, and you can ask us to delete what we hold at any time.
When you subscribe to the newsletter Email address, and the date and source of subscription. We use it to send the newsletter and nothing else. Lawful basis: consent. Kept for: until you unsubscribe, plus a suppression record so we don't email you again by accident.
When you apply for a role Whatever you send us CV, portfolio, links, covering note. Lawful basis: legitimate interests (assessing applications) and steps prior to entering a contract. Kept for: twelve months after the process closes, unless you ask us to keep it on file for longer.
When you use the site Pages viewed, approximate location by country, referrer, device and browser type. This is aggregated and we can't identify you from it. Lawful basis: legitimate interests (understanding what's read and what isn't). Kept for: 26 months.
When you're a client Contact details for the people we work with, plus whatever business data an engagement requires analytics access, ad account access, customer research recordings, and so on. Lawful basis: contract performance, and legitimate interests for research participants. Kept for: seven years after the engagement ends, for tax and professional records. Research recordings are deleted at the end of the project unless we've agreed otherwise in writing.
Cookies and analytics
We use a privacy-focused analytics tool that sets no cookies and doesn't track you across other sites. It records page views, referrers and device type in aggregate.
We don't run advertising pixels on this site no Meta pixel, no LinkedIn Insight tag, no Google Ads remarketing. If that changes, this notice changes with it and you'll get a cookie banner with a real reject option.
Embedded content a video, a map, a form may set cookies of its own. Those are governed by the provider's policy, listed in section 4.
Research participants
We use a privacy-focused analytics tool that sets no cookies and doesn't track you across other sites. It records page views, referrers and device type in aggregate.
We don't run advertising pixels on this site no Meta pixel, no LinkedIn Insight tag, no Google Ads remarketing. If that changes, this notice changes with it and you'll get a cookie banner with a real reject option.
Embedded content a video, a map, a form may set cookies of its own. Those are governed by the provider's policy, listed in section 4.
Who we share data with
We use a small number of processors, each under a data processing agreement:
Email and productivity Google Workspace
Newsletter [ESP name]
Email and productivity Google Workspace
Website hosting and analytics [host], [analytics tool]
Project management and file storage [tools]
Accounting [accountant / software]
Some of these process data outside the UK and EEA, in which case transfers rely on UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision.
Your rights
Under UK GDPR and the EU GDPR you can ask us to:
give you a copy of the data we hold about you
correct it if it's wrong
delete it
restrict or object to how we use it
transfer it to another provider
withdraw consent, where consent was the basis
Email privacy@argot.studio. We'll respond within one month, and we won't charge you for it.
If you're unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority if you're in the EU. We'd rather you came to us first.
Security
Data is held in access-controlled systems with two-factor authentication and least-privilege access. Client credentials are stored in a password manager, never in documents or messages. We review access when someone joins or leaves. Laptops are encrypted.
No system is perfect. If a breach affects your data and presents a risk to you, we'll tell you and the ICO within the timeframes the law requires.
Changes
We'll update this notice when our processing changes. The date at the top tells you when it last happened. Material changes to marketing consent will be notified by email rather than a quiet edit.