Privacy policy
Before you publish: replace anything in [square brackets] and have a solicitor check this page. It is a starting template, not legal advice. Delete this note when done.
Last updated: 7 October 2026
This policy explains how Scream Max Studios looks after your personal data when you use this website. We are the controller of that data under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Scream Max Studios, [registered company name and number, if a company], North Lodge Court, South Horrington Village, Wells, Somerset, BA5 3DZ. To contact us about your data, use the details on our contact page.
What we collect and why
| What | Why we use it | Our lawful basis |
|---|---|---|
| Enquiry and project brief forms: name, email, phone and company (if given), project type, budget, timeline, your message, any link you share, the page you sent it from | To reply, understand your project and prepare a proposal | Your consent, and steps you ask us to take before a contract |
| Security data: IP address, browser details, the address requested and any security rule triggered | To block attacks and abuse and keep the site and forms safe | Legitimate interests (keeping our systems secure) |
| Spam protection: Google reCAPTCHA reads signals such as your IP address and how you interact with the page when you use a form | To check a form is being used by a person | Legitimate interests (preventing spam and abuse) |
| Analytics: pages viewed, approximate location, device and browser (only if analytics is switched on and you accept) | To understand how the site is used and improve it | Your consent |
| Live visitor count: a short code made from your IP address and browser details using a key that changes every day. Nothing is stored on your device, and it cannot be used to identify you | To see roughly how many people are on the site and which pages are busy | Legitimate interests |
| Map tiles: your IP address is sent to OpenStreetMap when the contact page map loads | To show you where the studio is | Legitimate interests |
| Your choices: your cookie choice and light or dark mode, stored in your browser | To remember your settings | Legitimate interests |
We collect this directly from you or from your browser. We do not knowingly collect special category data, and we ask that you do not include it in your messages.
Who we share it with
Only the providers we need to run the site and reply to you: our web host, our email provider, Google (reCAPTCHA and, if you accept, Analytics) and OpenStreetMap (map tiles). They act on our instructions or under their own privacy terms. We do not sell your personal data or use it for automated decisions.
Transfers outside the UK
Google may process data in countries outside the UK, including the United States. Where that happens it relies on approved safeguards such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.
How long we keep it
- Enquiries and briefs: up to 24 months after our last contact if we do not work together. If we do, we keep the records we need for the work and for accounting, usually six years.
- Security logs: 30 days by default, then deleted.
- Live visitor codes: 48 hours, then deleted.
- Analytics: as set in our analytics account, no longer than 14 months.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or move it to another service. You can object to processing based on legitimate interests, and withdraw consent at any time (this does not affect what we did before). To use any of these rights, use the details on our contact page. We aim to reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Cookies
See our cookie policy for the cookies and similar technologies we use and how to change your choice.
Children
This website is for businesses and is not aimed at anyone under 16. We do not knowingly collect children's data.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.