Privacy notice
Last updated: 27 October 2026
This notice explains how AP Studio collects and uses personal information when you contact us, work with us or visit apstudioweb.com, and the choices you have. We keep it short and plain.
Who we are
AP Studio is Andrea Paternuosto, a sole trader trading as AP Studio, 2 Rathmell Court, Leeds LS15 0RB. We are the controller of the personal information described here. Contact us about anything in this notice at [email protected] or on 07584 233084.
What we collect
- Enquiries: your name, business name, email, phone and what you tell us when you email, call or message us (including on WhatsApp).
- Proposals: before we contact a business we may look at information it has made public, such as its website, Google Business Profile, social media pages and Companies House record, to prepare a proposal.
- Projects: your business and contact details, your answers to our brief, and the logos, photos and text you send us for your website, dashboard or social media.
- Agreements: when you sign an agreement online we record your typed name, role, email, the time, your IP address and browser, and the exact version you signed, as evidence of the signature.
- Payments and accounts: invoices, payments received and the details needed for our business accounts.
- Website visitors: our hosting provider keeps short technical logs (such as IP address and browser) to deliver and protect the site. We do not use advertising or tracking cookies.
Why we use it, and our lawful basis
| What for | Lawful basis |
|---|---|
| Answering enquiries and preparing proposals | Legitimate interests (running and growing our business), or steps you ask us to take before a contract |
| Delivering your website, dashboard or monthly services | Contract |
| Recording signatures and keeping signed agreements | Contract, and legitimate interests (being able to prove what was agreed) |
| Invoices, accounts and tax records | Legal obligation |
| Keeping our website and systems secure | Legitimate interests |
| Showing a client's finished website in our portfolio | Only with that client's permission, given in their agreement |
We never sell personal information and we do not send marketing emails unless you have asked for them.
Who we share it with
We use trusted providers to run our business. They only use the information to provide their service to us:
- Cloudflare: website hosting, our database for client briefs and signed agreements, and email routing.
- Google: email and file storage.
- WhatsApp (Meta): if you message us there.
- AI tools (such as Anthropic Claude and OpenAI ChatGPT): to help us write, plan and design. We only share what the task needs, and we never use photos of people's homes or faces without permission.
- Resend: if we send you automatic emails, such as a copy of a signed agreement.
- Our accountant, HMRC and professional advisers, when needed.
When we build or run a system that holds your customers' information (for example a dashboard), you are the controller of that information and we act as your processor under your agreement with us.
Information sent outside the UK
Some of our providers are based in, or use servers in, the United States and other countries. Where this happens we rely on the UK's approved safeguards: the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the ICO's International Data Transfer Addendum to the standard contractual clauses.
How long we keep it
- Enquiries that do not lead to work: 12 months.
- Client project files, briefs and photos: for the project and while we support it; we then delete what is no longer needed.
- Agreements, signature records, invoices and accounts: 6 years after the agreement ends.
- Hosting logs: as set by our hosting provider, usually days to weeks.
Your rights
You can ask us for a copy of your information, and ask us to correct it, delete it, restrict or object to how we use it, or to send it to you or someone else in a usable format. Some rights depend on the reason we hold the information (for example, we must keep accounts for 6 years). Contact [email protected]; we reply within one month.
Changes
We will update this notice when how we work changes, and show the date at the top.