Privacy Policy

Eido Studio is the trading name of Andrew Johnston. We are committed to respecting and protecting the privacy of anyone using our site and the confidentiality of any information you provide us with. This privacy notice is designed to make clear the ways we treat data you provide us with in person, online, via email, phone, in writing or other correspondence.

Any data collected will be used and held in accordance with the requirements of the EU General Data Protection Regulations (GDPR) and other applicable privacy laws. We will never release your information to third parties for their marketing purposes. We only use personal information in the ways we need to and that is expected of us.

Information We Collect

We may collect and process the following types of personal information:

• Contact Information: Name, email address, phone number when you contact us through our website forms or directly

• Website Usage Data: Information about how you use our website, including pages visited, time spent on pages, and navigation patterns

• Technical Information: IP address (anonymized), browser type, device information, and referring website

• Communication Records: Correspondence between you and Eido Studio regarding our services

How We Collect Information

We collect information through:

• Website contact forms

• Email correspondence

• Phone conversations

• In-person meetings

• Website analytics tools (detailed below)

• Local storage on your device

Website Analytics

Google Analytics

When someone visits eido.studio, we use Google Analytics to collect standard internet log information and details of visitor behavior patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Plerdy Analytics

We use Plerdy analytics tools to understand user behavior on our website. Plerdy collects data about how visitors interact with our site including clicks, scrolling patterns, heatmaps, and page navigation. Plerdy does not record or store personal data entered in website fields. All Plerdy servers are located in Germany under strict data protection laws, and they adhere to high standards of data privacy and security.

Cookies and Local Storage

This website uses cookies and local storage technologies, which are small text files and data stored on your computer's hard drive or in your browser by websites that you visit. They save and retrieve pieces of information about your visit to the website – for example, how you entered the site, how you navigated through the site and what information was of interest to you.

Types of Cookies We Use:

• Essential Cookies: Necessary for the website to function properly

• Analytics Cookies: Help us understand how visitors use our website (Google Analytics, Plerdy)

• Preference Cookies: Remember your settings and preferences

Local Storage Usage

In addition to cookies, we use browser local storage to enhance user experience. This may include storing session information, traffic channels, IP verification, form popup states, and interaction preferences on your device.

Cookie Consent

We will ask for your consent before placing non-essential cookies through our cookie banner. You can manage your cookie preferences through our cookie banner or by contacting us directly. You can also control cookies through your browser settings, though this may limit some website functionality.

Third-Party Services

We use the following third-party services that may process your data:

• Google Analytics: For website traffic analysis and user behavior insights

• Framer: For website hosting, contact form functionality, and website analytics (when using Framer's built-in analytics)

• Plerdy: For user behavior analytics, heatmap tracking, and website optimization

Our website contains links to other websites. This privacy notice only applies to this website, so when you link to other websites you should read their own privacy notices.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Legitimate Interest: For website analytics, improving our services, and business communication

• Consent: For marketing communications and non-essential cookies

• Contract Performance: For delivering agreed services and responding to service inquiries

• Legal Obligation: For maintaining records as required by HMRC and other regulations

How We Use Your Information

We use your personal information to:

• Respond to your inquiries and provide requested information

• Deliver our design and branding services

• Maintain customer relationships and provide ongoing support

• Improve our website and services based on usage patterns

• Comply with legal obligations (e.g., maintaining business records)

• Send relevant updates about our services (with your consent)

Data Storage and Retention

We hold different types of information for appropriate periods:

• Customer contact information: As long as necessary for ongoing business relationships

• Project files and correspondence: For the duration of projects and reasonable period afterward

• Financial records: 6 years in line with HMRC requirements

• Website analytics data: As determined by our analytics providers' retention policies

• Email subscribers: Until you unsubscribe or withdraw consent

All data is stored securely and access is limited to authorized personnel only.

Data Sharing

We are part of a business community that thrives on communication. We value the interconnectedness of the business community and want to play a role in assisting and helping others. However, we will never share your personal information with third parties for their marketing purposes.

We may share limited information only:

• When required by law or legal process

• With service providers who assist in delivering our services (under strict confidentiality agreements)

• With your explicit consent

• To protect our rights or the safety of others

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request copies of your personal data

• Right to Rectification: Request correction of inaccurate or incomplete data

• Right to Erasure: Request deletion of your personal data

• Right to Restrict Processing: Request limitation of how we process your data

• Right to Data Portability: Request transfer of your data to another service

• Right to Object: Object to processing based on legitimate interests

• Right to Withdraw Consent: Withdraw consent for consent-based processing at any time

To exercise any of these rights, please contact us using the information below.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Secure data transmission (SSL encryption)

• Limited access to personal data on a need-to-know basis

• Regular security assessments

• Secure data storage with reputable providers

International Data Transfers

Some of our service providers may be located outside the UK/EU. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "last updated" date.

Contact Us

If you have any questions about this privacy policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact us:

Email: hello@eido.studio
Address: Edinburgh, Scotland
Website: www.eido.studio

For privacy-related inquiries, we will respond within 30 days of receiving your request.

Complaints

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.

Eido Studio is committed to protecting your privacy and ensuring transparent data practices. This policy demonstrates our commitment to data protection and your privacy rights.

Last updated: June 7, 2025