Last updated: 3rd of December of 2025.
This Privacy Policy explains how Underground Studio (“we”, “us”, “our”) collects, uses and protects your personal data when you visit undergroundstudio.io (“the Website”).
By using the Website, you agree to the terms of this Policy.
For questions or requests, contact us at:
📧 contact@undergroundstudio.io
1. Who we are
Underground Studio is a Sole Trader business based in the United Kingdom, operating under the trading name “Underground Studio”.
We do not publicly display personal information such as the full legal name or postal address.
Such details are available upon legitimate, written request.
2. Data We Collect
We only collect the data necessary to operate the Website, provide services, and improve the user experience.
2.1. Data you provide voluntarily (Contact Form)
When you submit a form or contact us by email, you may provide:
- Name
- Email address
- Company (optional)
- Message content
- Any other information you choose to include
We use this data solely to respond to your enquiry.
2.2. Automatically collected data (Analytics & Tracking)
We use third-party analytics and behavioural tools to understand how visitors use the Website.
These tools may collect:
- IP address (sometimes anonymised)
- Device type
- Browser and operating system
- Pages visited and time spent
- Interaction events (clicks, scroll depth, navigation patterns)
- Session behaviour (aggregated, not personally identifiable)
- Referrer and campaign parameters
- General geolocation (city/region level, never precise address)
Google Analytics
We use Google Analytics to gather aggregate usage statistics.
Google may process:
- IP address (with IP anonymisation enabled, unless especificado otherwise)
- Device and browser metadata
- Behaviour patterns
Google acts as a data processor under their EU/UK frameworks.
Hotjar
We may use Hotjar to analyse user behaviour.
Hotjar may collect:
- Heatmaps
- Scrollmaps
- Session recordings (blurred and anonymised where appropriate)
- Click/tap interactions
- Device information
- User flow
- Feedback polls or surveys (if enabled)
Hotjar does not record keystrokes inside form fields and does not allow us to identify individuals.
2.3. Server logs
Our hosting provider may collect:
- IP address
- Browser type
- Error logs
- Timestamps
- Basic diagnostic data
This is used for security, debugging, and performance monitoring.
3. Cookies
The Website uses cookies for:
- Essential WordPress functionality
- Analytics (Google Analytics)
- Behavioural tracking (Hotjar)
- Security and performance
You can manage cookie preferences via the cookie banner.
If required by UK/EU law, analytics and tracking cookies will only run after user consent.
A full Cookie Policy is provided separately.
4. How We Use Your Data
We may use your data to:
- Respond to enquiries
- Provide information about our services
- Maintain, secure and improve the Website
- Analyse usage and performance
- Detect and prevent abuse or attacks
- Comply with legal obligations
We do not use your personal data for advertising or sell it to third parties.
5. Payments
We do not sell products directly on the Website.
If you purchase a paid service or plugin through an external provider such as Stripe, their privacy policy applies.
We only receive the minimum information required to deliver the product or service (e.g., your email address).
6. Sharing Your Data
We may share data with:
6.1. Service providers
Such as:
- Hosting (e.g., Hostinger)
- Email delivery services
- Analytics providers (Google Analytics)
- Behavioural tools (Hotjar)
- Security/debugging tools
These providers act under strict data protection agreements.
6.2. Legal or regulatory authorities
Only when required by law.
We never share your data for marketing, resale, or advertising purposes.
7. International Data Transfers
Data may be processed in or transferred to countries outside the UK/EEA.
When this occurs, we rely on:
- UK adequacy regulations
- EU adequacy decisions
- Standard Contractual Clauses (SCCs)
- Other equivalent safeguards
Third-party providers like Google and Hotjar offer GDPR-compliant frameworks.
8. Data Retention
We retain personal data only as long as necessary:
- Contact form emails: up to 12 months
- Analytics data: as per Google/Hotjar retention settings (typically 14–26 months)
- Server logs: usually 30–120 days
You may request deletion at any time.
9. Your Rights (UK GDPR & EU GDPR)
You have the right to:
- Access your data
- Request corrections
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent (e.g., cookies)
To exercise your rights:
📧 contact@undergroundstudio.io
10. Children’s Privacy
The Website is not intended for individuals under 16.
We do not knowingly collect data from minors.
11. Security
We take reasonable technical and organisational measures to protect your data.
However, no system is 100% secure.
12. Third-Party Links
We are not responsible for the privacy practices of external websites linked from this Website.
13. Changes to This Policy
We may update this Policy periodically.
Changes will be published on this page.
14. Contact Us
For privacy-related questions or requests:
📧 contact@undergroundstudio.io
