h-potter-studio (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains who we are, what data we collect, and how we use it, in plain English.
1. Data We Collect
We collect information you provide directly (name, email address) when you contact us or subscribe to our newsletter.
We also automatically collect usage data: IP address, browser type, pages visited, time on site, and referral URLs.
We do not collect sensitive personal data such as payment card numbers or government ID.
2. How We Use Your Data
To deliver and improve editorial content on h-potter-studio.
To respond to enquiries and send newsletters you have opted into.
To analyse site performance and understand audience interests via aggregated analytics.
3. Cookies
We use essential cookies (session management), analytics cookies (Google Analytics 4), and optional preference cookies.
You may manage or withdraw cookie consent at any time via our Cookie Settings panel or by visiting #/cookies.
Blocking analytics cookies does not affect your ability to read our content.
4. Third Parties
We share anonymised analytics data with Google LLC (Google Analytics) under a Data Processing Agreement.
We use Mailchimp (The Rocket Science Group LLC) to manage newsletter subscriptions; they process email addresses on our behalf.
We do not sell your personal data to any third party, ever.
5. Your Rights (GDPR & CCPA)
EU/UK residents have the right to access, rectify, erase, restrict, or port their personal data, and to object to processing.
California residents have the right to know, delete, and opt out of the sale of personal information (we do not sell data).
To exercise any right, email us at [email protected] and we will respond within 30 days.
6. Data Retention
Contact form submissions are retained for up to 24 months, then securely deleted.
Newsletter subscriber data is kept until you unsubscribe, after which it is purged within 30 days.
Server log files are retained for 90 days for security purposes.
7. Security
Our site is served exclusively over HTTPS with TLS 1.2+.
Access to personal data is restricted to authorised team members under confidentiality obligations.
Despite reasonable safeguards, no internet transmission is 100{0fa0cf487d4c54865850cd2cdc82262d9de42d980ebda82ea107e6144c4145e1} secure; we encourage strong passwords and caution.
8. Children's Privacy
h-potter-studio is not directed at children under 13 (or 16 in the EU).
We do not knowingly collect data from minors. If you believe a minor has submitted data, contact us immediately and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy periodically. The 'Last Updated' date at the top of the page will reflect any changes.
Continued use of h-potter-studio after a material change constitutes acceptance of the revised policy.
For significant changes we will notify newsletter subscribers by email.
10. Contact
Data Controller: h-potter-studio Editorial Team, London, United Kingdom.