Privacy Policy

Studio Duke ("Studio Duke", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how long we keep it, who we may share it with and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: 20 August 2026

1. Who We Are

Business name: Studio Duke
Business type: Sole trader
Data controller: Alfie Duke trading as Studio Duke
Business address: Unit 204, Albert Mill, Milnrow, Rochdale, United Kingdom
Email: contact@studioduke.co.uk
Phone: 07591 227012

Studio Duke is the data controller responsible for personal data processed in connection with our website, studio, bookings, tuition, recording, rehearsal and other services.

If you have any questions about how we use your personal data, please contact us using the details above.

2. What Personal Data We Collect

Depending on how you interact with Studio Duke, we may collect:

Identity information

• Name

• Artist or band name

• Age where relevant to a service or safeguarding requirement

Contact information

• Email address

• Telephone number

• Postal address where required

Booking and service information

• Booking dates and times

• Services booked

• Studio or rehearsal room information

• Project or session information

• Notes relating to your booking

• Relevant communications about your booking

Payment and financial information

• Payment status

• Invoice information

• Transaction references

• Information required for accounting and tax purposes

We do not normally store full payment card details.

Communications

• Emails

• Contact form submissions

• Messages

• Booking enquiries

• Other correspondence you send to us

Website and technical information

Depending on the services and technologies used on our website, we may collect:

• IP address

• Browser and device information

• Website usage information

• Cookie and similar technology information

CCTV information

Our CCTV systems may capture images of people entering or using our premises.

Further information about CCTV is provided in Section 9 of this policy.

3. How We Collect Personal Data

We may collect information when you:

• Contact us directly

• Make a booking or enquiry

• Use our website

• Complete a contact or booking form

• Attend our premises

• Book recording, rehearsal, tuition or other services

• Communicate with us by email, telephone, social media or messaging services

• Enter into an agreement with us

• Make a payment

• Subscribe to marketing communications

• Visit our premises where CCTV is in operation

We may also receive limited information from third-party services used to operate our business, such as booking, payment, accounting or website services.

4. How We Use Your Personal Data

We use personal data where necessary to:

• Process and manage bookings

• Provide recording, rehearsal, tuition and other services

• Communicate with customers and clients

• Respond to enquiries

• Manage payments and invoices

• Maintain business and financial records

• Provide customer support

• Manage our premises and equipment

• Protect people and property

• Prevent and investigate theft, damage, fraud or other incidents

• Comply with legal and regulatory obligations

• Resolve disputes and enforce agreements

• Improve our services and website

• Send marketing communications where permitted

• Maintain the security of our systems and premises

We do not sell your personal information.

5. Lawful Bases for Processing

We only process personal data where we have a lawful basis to do so.

Depending on the circumstances, this may include:

Contract

We may process your information where it is necessary to provide a service you have booked or to take steps before entering into an agreement with you.

For example, we need your contact details to arrange a recording session or rehearsal booking.

Legitimate interests

We may process information where it is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights.

This may include:

• Managing our business

• Communicating with customers

• Protecting our premises and equipment

• Preventing crime and fraud

• Managing disputes

• Improving our services

Legal obligation

We may process information where we are legally required to do so, including for accounting, taxation and other regulatory purposes.

Consent

Where required, we may rely on your consent, such as for certain marketing activities or optional cookies.

Where processing is based on consent, you may withdraw your consent at any time.

6. Marketing

We may contact you about Studio Duke services, offers, events or other relevant information where we are legally permitted to do so.

Where consent is required, we will ask you to opt in.

You can stop receiving marketing communications at any time by:

• Using the unsubscribe option provided in the communication; or

• Contacting us at contact@studioduke.co.uk

Stopping marketing communications will not affect essential communications relating to bookings, payments, contracts or services you have requested.

7. Who We Share Personal Data With

We do not sell or rent personal data.

We may share personal data with trusted third parties where necessary to operate Studio Duke or meet our legal obligations.

These may include:

• Booking and scheduling providers

• Payment providers

• Website and hosting providers

• Email and communication providers

• Accounting and bookkeeping providers

• IT and software providers

• Professional advisers

• Insurers

• Police or other law enforcement agencies

• Government or regulatory authorities where legally required

We only share information that is reasonably necessary for the relevant purpose.

Where third parties process personal data on our behalf, we take reasonable steps to ensure appropriate data protection and security arrangements are in place.

8. Data Security

We take reasonable technical and organisational measures to protect personal data against:

• Unauthorised access

• Accidental loss

• Destruction

• Misuse

• Unauthorised disclosure

• Unauthorised alteration

Access to personal information is restricted to people and systems that need it for legitimate purposes.

Where appropriate, we use measures such as account passwords, two-factor authentication, access controls and secure online services.

No method of storing or transmitting information over the internet can be guaranteed to be completely secure. However, we take reasonable steps to protect the information we hold.

9. CCTV and Video Surveillance

Studio Duke operates CCTV cameras at and around its premises.

Our CCTV systems may include cameras provided by Tapo and Ring.

Why we use CCTV

CCTV is used for legitimate security purposes, including:

• Protecting customers, visitors and other people

• Protecting Studio Duke's premises and equipment

• Preventing and detecting theft

• Preventing and investigating criminal activity

• Investigating damage or other incidents

• Supporting insurance or legal claims where necessary

Our lawful basis for CCTV is generally legitimate interests.

Areas covered

CCTV may record areas such as entrances, access points and other areas of the premises where security monitoring is reasonably necessary.

Cameras will not intentionally be placed in areas where people have a reasonable expectation of privacy, such as toilets or changing areas.

We will take reasonable steps to avoid unnecessarily recording neighbouring properties or areas outside the scope of our security requirements.

Audio

Where possible and appropriate, audio recording will be disabled on CCTV equipment. We will not intentionally use CCTV to record private conversations unless there is a specific and lawful reason to do so.

Retention

CCTV footage is normally retained for up to 30 days before being automatically deleted or overwritten.

Footage may be retained for longer where reasonably necessary because of:

• A suspected crime

• An accident or incident

• An insurance claim

• A complaint

• A legal dispute

• A police investigation

• A legal or regulatory requirement

Once the reason for retaining footage no longer applies, it will be deleted where reasonably practicable.

Access to CCTV

Access to CCTV footage is restricted to authorised persons who have a legitimate reason to access it.

CCTV footage may be provided to:

• The police

• Law enforcement agencies

• Insurers

• Legal or professional advisers

• Other appropriate parties where there is a lawful and legitimate reason

We will not routinely publish CCTV footage online or on social media.

CCTV requests

If you believe you have been recorded by our CCTV, you may contact us to request access to your personal data.

We may need information such as the date, approximate time and location to help identify the relevant footage.

Requests will be dealt with in accordance with applicable data protection law. Footage may be withheld, redacted or restricted where required or permitted by law, including where disclosure would adversely affect the rights of other individuals.

10. Cookies and Website Tracking

Our website may use cookies and similar technologies.

These may be used to:

• Make the website function correctly

• Remember preferences

• Understand how visitors use the website

• Improve website performance

• Provide optional analytics or other functionality

Where required by law, non-essential cookies will only be used with your consent.

You can control cookies through your browser settings and, where available, our website's cookie controls.

The exact cookies used may change as our website and services change.

11. How Long We Keep Personal Data

We do not keep personal data indefinitely.

The length of time we retain information depends on what it is and why we need it.

Generally:

Booking and customer information: Kept for as long as reasonably necessary to provide our services, manage our business, resolve disputes and meet legal requirements.

Financial and accounting records: Kept for the period required by applicable tax and accounting requirements.

Marketing information: Kept until you unsubscribe, withdraw consent or the information is no longer reasonably required.

Enquiries: Kept for a reasonable period to deal with the enquiry and any resulting relationship or transaction.

CCTV footage: Normally retained for up to 30 days, unless required for an incident, investigation, claim or legal purpose.

When personal data is no longer required, we will take reasonable steps to securely delete or dispose of it.

12. Your Data Protection Rights

Depending on the circumstances, you have rights under UK data protection law, including the right to:

• Ask for a copy of personal data we hold about you

• Ask us to correct inaccurate or incomplete information

• Ask us to delete personal information in certain circumstances

• Ask us to restrict how we process your information in certain circumstances

• Object to certain types of processing

• Request transfer of certain information to another organisation where applicable

• Withdraw consent where processing is based on consent

These rights are subject to certain legal exceptions and limitations.

To exercise your rights, contact:

Email: contact@studioduke.co.uk

We may need to verify your identity before dealing with certain requests.

We will normally respond to valid data protection requests within the timeframe required by law.

13. Children's and Young People's Data

Studio Duke may provide services to people under the age of 18, including music tuition and educational activities.

Where we process information about children or young people, we take appropriate care to ensure that their personal information is handled lawfully and securely.

Where appropriate, we may communicate with or obtain information from a parent or guardian in accordance with our booking arrangements, safeguarding requirements and applicable law.

We do not knowingly use children's personal information for unnecessary marketing purposes.

14. International Data Transfers

Some of the technology and service providers we use may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will take reasonable steps to ensure that appropriate safeguards are in place as required by UK data protection law.

15. Data Breaches

If we become aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable data protection law.

Where legally required, we will notify the Information Commissioner's Office and/or affected individuals.

16. Complaints

If you have concerns about how Studio Duke handles your personal data, please contact us first:

Email: contact@studioduke.co.uk

We will try to resolve your concerns.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully.

Information Commissioner's Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we process personal data.

The latest version will be published on the Studio Duke website.

Last updated: 20 August 2026

Contact

If you have any questions about this Privacy Policy or your personal data, contact:

Studio Duke
Unit 204, Albert Mill
Milnrow, Rochdale
United Kingdom

Email: contact@studioduke.co.uk
Phone: 07591 227012