Legal

Privacy Notice

This page is maintained by STUDIO COMMUNICATIONS to explain what personal data we collect, why we collect it, and the choices you have.

STUDIO COMMUNICATIONS ("STUDIO COMMUNICATIONS", "we", "us") is a strategic communications practice registered in Cyprus. This notice describes how we handle personal data across our website, client projects and marketing activity, in line with the EU General Data Protection Regulation (GDPR) and the Cyprus Processing of Personal Data (Protection of the Individual) Law.

1. Who is the data controller

The data controller is STUDIO COMMUNICATIONS, 16th June 1943 16, Limassol, Cyprus. For any privacy question, contact us at info@studio-comms.com.

2. What we collect

  • Contact data you submit through project enquiries, briefing forms or email (name, work email, company, phone, message content).
  • Newsletter data if you subscribe to The Dispatch (email address and subscription date).
  • Technical data your browser sends automatically (IP address, device, browser, referrer, pages viewed).
  • Cookie data as set out in our Cookie Notice.

3. Why we use it — and our legal basis

  • To respond to enquiries and deliver client work — performance of a contract, or steps taken before entering a contract.
  • To send The Dispatch newsletter — your consent, which you can withdraw at any time via the unsubscribe link in every issue.
  • To keep the site secure and improve it — our legitimate interest in running a functional, safe website.
  • To meet legal, tax and accounting obligations in Cyprus and the EU.

4. Who we share it with

We do not sell personal data. We share limited data with vetted processors that support the studio, including hosting, email delivery, analytics and payments providers. Every processor is bound by a data processing agreement and processes data only on our instructions.

5. International transfers

Some processors operate outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

  • Enquiry emails: up to 24 months after last contact.
  • Client project files: 7 years, in line with Cypriot tax rules.
  • Newsletter data: until you unsubscribe, then removed within 30 days.
  • Server logs: 30 days.

7. Your rights

Under GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these rights, email info@studio-comms.com. If you are not satisfied with our response, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).

8. Security

We apply reasonable technical and organisational measures — access control, encryption in transit, least-privilege sharing and staff training — to protect personal data against loss, misuse or unauthorised access.

9. Changes to this notice

We may update this notice as the studio evolves or the law changes. Material changes will be flagged on this page and, where appropriate, by email.