Privacy

Who we are

Ella Bailey Studio is run by Ella Bailey Studio Limited, registered in England and Wales under company number 17522170, at 11 Hampstead Road, Brighton, BN1 5NG. We decide how your information is used, which makes us its controller.

For anything on this page, write to ella@ellabaileystudio.com.

The website and enquiries

When you visit. The site is hosted by Vercel, which handles the technical details every visit involves, such as your IP address and browser, to deliver the page and keep the site secure. We count visits with Vercel Web Analytics, which uses no cookies and tells us totals, such as how many people read a page, never who they are. It doesn’t run in the client portal. The site sets no advertising or tracking cookies.

When you send an enquiry. The form asks for your name, email address and phone number, where the property is, the kind of project and the rooms involved, and anything you’d like to add, with photos or plans if you choose. We use them to reply to you and to talk about your project. Cloudflare Turnstile checks that the form was sent by a person rather than a program.

Your enquiry is emailed to Ella through Resend, which also sends you a confirmation. It is kept in the studio’s records, stored with Supabase in Ireland, and logged in Notion, where we keep track of enquiries. Files you attach are stored privately with Supabase. We also count how many enquiries arrive, without any of their contents.

We rely on two lawful bases here: taking the steps you’ve asked for before any agreement, and our legitimate interest in running the studio and its website securely, and in keeping the form free of spam.

An enquiry that doesn’t lead to a project is kept for 12 months, then deleted.

The client portal

If we work together, Ella may invite you to the client portal, a private space for your project. It holds your name and email address, your answers to the design questionnaire, the files you and the studio share there, and any notes the studio keeps on your project. You sign in with a code sent to your email by Resend, and the portal uses cookies only to keep you signed in. It is stored with Supabase in Ireland.

Behind the portal, the studio keeps its own records of the projects it runs: contacts, quotes, invoices and payments, in a private system also stored with Supabase in Ireland, with encrypted backups held by Cloudflare in the EU. Our email and calendar are on Google Workspace, so the emails you send us are held by Google. The studio’s system reads them to show Ella the messages that belong to a project, and keeps no copy.

We hold this information to carry out our agreement with you, and to meet our legal duties. Invoices and accounting records are kept for six years, as UK law requires, and the monthly backups that contain them for seven. Your portal account and its files are kept for 2 years after the project ends.

HQ Sourcing, the browser extension

HQ Sourcing is a Chrome extension the studio uses to save products it is considering for a project. It isn’t offered to visitors or clients, and it does nothing until it is connected to the studio’s own system.

It reads a web page only when Ella or Dan clicks its button on that page, and sends something only when they confirm. What it sends is about the product: its name, price, shop and web address, a photo, and any notes they add. These go to the studio’s system, stored with Supabase in Ireland, as a draft. The photo is fetched straight from the shop’s site without cookies, and saved as a fresh copy without the details cameras embed.

On the computer, the extension keeps only its connection key and the last project chosen, in Chrome’s storage on that computer, never synced elsewhere. It has no analytics and no tracking, sends nothing to anyone else, and runs no code from outside itself.

Our lawful basis is our legitimate interest in running the studio’s work.

Who handles your information for us

• Vercel hosts the website and the portal, and counts visits.
• Supabase stores enquiries, the portal and the studio’s records, in Ireland.
• Resend sends enquiry emails and portal sign-in codes.
• Notion is where we keep track of enquiries.
• Cloudflare checks the enquiry form for spam, and holds encrypted backups of the studio’s records in the EU.
• Google runs the studio’s email and calendar.

Each handles your information only to provide its service to us. We don’t sell it or share it for marketing. Some of these companies are based in the United States. Each of these providers handles your information under its own data processing terms, and where information leaves the UK it is protected by the safeguards UK law approves.

Your rights

You can ask to see the information we hold about you, to correct it, to have it deleted, to limit how we use it or object to our using it, and for a copy to take elsewhere. Some of these depend on why we hold it: we can’t delete invoices the law says we must keep, for example. Write to ella@ellabaileystudio.com and we’ll reply within a month.

Complaints

If you’re unhappy with how we’ve handled your information, tell us first and we’ll put it right where we can. You can also complain to the Information Commissioner’s Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

If this notice changes, the new version will be here, with its date at the top.