TPHILAUTIA · CREATIVE STUDIO

Privacy Policy

What information this website collects, why, and what happens to it

Who is responsible for your information

Tphilautia Creative Studio, trading name of Theepiha Rani Sathavoo
Flat 6, One Newgate, Croydon, CR0 2FB
Email: studio@tphilautia.com

I am the data controller for the personal information described on this page.

Tphilautia Creative Studio is registered with the Information Commissioner's Office (ICO) for data protection. ICO Registration Reference: 00015980288. The business has paid £47 by Direct Debit for the ICO Data Protection Fee. This payment is separate from other business registrations.

Information you give me

Contact formYour name, email address, company or organisation (optional), the service you are interested in (optional) and your message. The form is delivered by Web3Forms, a form-handling service, which sends the message to my studio inbox.

Orders and project enquiriesYour name, email address, telephone number, company or project name, billing address, the details of the project you describe and any notes you add at checkout.

Not collectedThere are no user accounts, passwords, newsletters or advertising cookies on this website.

Payments

If you pay through the website checkout, payments are processed by Stripe. Card details are entered on Stripe’s own secure checkout and are never sent to, or stored on, this website. I receive confirmation that the payment succeeded, along with a payment reference and the card brand and last four digits.

Projects can also be ordered or agreed by email, telephone or WhatsApp, in which case the details you send me are handled in the same way as described here.

Information collected automatically (only with your consent)

The website uses Google Analytics to understand how the site is used. It only runs if you accept the cookie notice. When it runs it records pages viewed and how long they are viewed, an approximate location derived from your IP address, your device and browser type, and the site that referred you here.

If you decline — or simply do not answer — no analytics script is loaded and no analytics cookies are set.

Information stored in your own browser

Your theme preference and your shopping basket are stored in your browser’s local storage so that they survive a page refresh. This stays on your device and is only sent to me if you complete an order.

How I use your information, and why

Replying to your enquiryTo answer your message and discuss your project. This is in my legitimate interests as a business responding to a request you made.

Providing the workTo agree, plan and deliver the design work you order. This is part of performing our contract.

Taking paymentTo process your payment and keep a record of the order. This is part of performing our contract.

Accounting and taxTo keep the records I am required to keep. This is a legal obligation.

Website analyticsTo understand which pages are useful. This is based on your consent, which you can withdraw at any time.

Who I share it with

I share information only with the services needed to run the website and take orders:

Web3Forms — delivers contact form messages to my inbox.
Stripe — processes card payments.
Google LLC — provides Google Analytics, and only if you accept the cookie notice.
Vercel — hosts the website and keeps standard server logs.

I do not sell your information, and I do not share it for advertising.

Where your information is processed

Some of the providers listed above are based outside the United Kingdom, mainly in the United States, so your information may be processed there. Where that happens I rely on the transfer safeguards those providers have in place.

How long I keep information

General enquiries. If you contact me but we do not go on to work together, I keep your enquiry and our correspondence for up to 12 months after the enquiry is resolved, so that I can follow up and keep a record of what was discussed. After that it is deleted.

Orders, payments and financial records. If you order work, I keep order, invoice, VAT and related accounting records for 72 months (6 years) to meet HMRC requirements as a VAT-registered business. These are kept separately from other categories.

Enquiries and correspondence. Enquiries sent by email, the contact form, telephone or WhatsApp are kept only for as long as needed to respond to and follow up on that enquiry, or to handle any related complaint or legal claim. They are reviewed and deleted when no longer needed for those purposes; no fixed blanket period is applied.

Marketing. There are no user accounts, passwords or newsletters on this website. I do not run a marketing subscriber list through this site. If you have opted in to receive marketing separately (outside this website), any such data is handled separately and only for as long as necessary for that specific purpose or until you withdraw consent.

Analytics. Google Analytics data is held for the retention period set in this website’s Google Analytics property.

When information is no longer needed for any of these purposes, it is deleted or anonymised in line with the above.

Your rights

Under UK data protection law you have the right to ask for a copy of the information I hold about you, to have it corrected or erased, to restrict or object to how it is used, to receive it in a portable format, and to withdraw consent to analytics at any time. Withdrawing consent does not affect anything done before you withdrew it.

To use any of these rights, email studio@tphilautia.com. If you have a complaint about how I handle your data or about a project, you can also use the complaints process set out in the Terms of Service. If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

This website sets no cookies at all until you accept the cookie notice. If you accept, Google Analytics sets its own cookies so it can tell repeat visits apart and keep track of a session.

_gaDistinguishes one visitor from another. Set only after you accept. Expires after 2 years by default.

_ga_WCDZJF96RRKeeps Google Analytics session state for this site. Set only after you accept. Expires after 2 years by default.

If you decline or withdraw your consent, any analytics cookies already set by this site are deleted. You can change your mind at any time using Cookie settings in the footer, or by clearing cookies for this site in your browser. Blocking cookies in your browser does not stop you using the website.

Your theme preference and shopping basket are kept in your browser’s local storage rather than in cookies, and are not sent anywhere unless you place an order.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new date. This version was last updated on 17 October 2026.

For how orders, payments and refunds work, see the Terms of Service.