Privacy Policy.

We take your privacy seriously. This Privacy Policy outlines how we collect, use, and protect your personal data across all parts of our business, including video production services, studio hire, and our online store.

We are committed to handling your data fairly, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

We are pastl.co, a UK-based video production company operated by [Your Full Name], trading as a sole trader. We run:

  • A creative video production service

  • A hireable studio space (pastl.studio)

  • An online store selling branded merchandise

This policy applies to all interactions with our website (www.pastl.co), our services, and online transactions.

2. What Personal Data We Collect

Depending on how you interact with us, we may collect:

a) General Enquiries & Communication

  • Name

  • Email address

  • Phone number

  • Company name (if applicable)

  • Your enquiry or message

b) Studio Bookings (pastl.studio)

  • Booking date and time

  • Purpose of booking (e.g., shoot type)

  • Attendee information (if relevant)

  • Payment information (via third-party processors)

c) Video Production Services

  • Project details

  • Contact and client brief information

  • Business data (if B2B)

  • Media files you provide to us

d) Online Store Orders

  • Full name and shipping address

  • Billing address

  • Email address

  • Phone number (optional)

  • Purchase details

  • Payment information (processed securely by third-party services like Stripe or PayPal)

e) Website Usage (Cookies & Analytics)

  • IP address

  • Browser type, device type

  • Pages visited and interaction data

  • Referral links

We use cookies for analytics and site performance. See Section 6 for details.

3. How We Use Your Data

We use your personal data to:

  • Respond to enquiries

  • Manage and confirm studio bookings

  • Deliver video production services

  • Process and ship online store orders

  • Send order confirmations and receipts

  • Handle returns or customer service requests

  • Improve our website, content, and services

  • Maintain accounting and legal records

We do not send marketing emails without your explicit consent.

4. Legal Bases for Processing

We process your personal data under one or more of the following lawful bases:

  • Contract: To fulfil services, process payments, and deliver goods or bookings.

  • Consent: For optional cookies and marketing (if applicable).

  • Legal obligation: For tax, accounting, or regulatory compliance.

  • Legitimate interests: To operate and improve our website and services.

5. Sharing Your Data

We do not sell your personal data.

We may share your data with:

  • Payment processors (e.g., Stripe, PayPal)

  • Shipping partners (e.g., Royal Mail, DPD)

  • Website and hosting services (e.g., Shopify, Webflow, Squarespace – depending on platform)

  • Service providers (email, forms, analytics)

  • Legal authorities if required

All third parties are GDPR-compliant and only process your data as instructed by us.

6. Cookies and Analytics

Our website uses cookies and tools like Google Analytics to:

  • Understand how visitors use the site

  • Improve website performance and user experience

  • Track store behaviour and cart abandonment

Essential cookies are required for basic site functionality. You can manage cookie preferences in your browser settings.

A cookie notice appears on your first visit to give you control over your preferences.

7. Data Retention

We retain your personal data for the minimum amount of time necessary:

  • Booking and order records: 6 years (for tax and legal reasons)

  • General enquiries: 12 months

  • Analytics data: Up to 26 months

  • Client project files: As agreed in your contract or written communications

8. How We Protect Your Data

We use:

  • Secure, encrypted website connections (HTTPS)

  • Strong passwords and access restrictions

  • Reputable cloud-based tools with GDPR-compliant providers

We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.

9. Your Rights Under UK GDPR

You have the right to:

  • Access the data we hold about you

  • Correct inaccurate personal data

  • Request deletion of your data (where lawful)

  • Withdraw consent (where consent is the legal basis)

  • Object to or restrict certain types of processing

  • File a complaint with the Information Commissioner’s Office (ICO)
    👉 Website: https://ico.org.uk

To exercise your rights, email us at hello@pastl.co

10. Children

We do not knowingly collect or process personal data of individuals under 16 years of age. If you believe we have collected such data, please contact us immediately for deletion.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with an updated "Effective Date."

12. Contact Us

If you have any questions about this policy or your data, contact:

Email: hello@pastl.co
Studio Address: GRF12, Bond House, Goodwood Road, SE14 6EF
ICO Status: Not currently required to register