Privacy
What we collect, why, and how to get rid of it. Last updated 3 September 2026.
Who we are
Oculis Studio is a [sole trader / limited company] trading in the UK. We are the data controller for the information described here.
- Trading name
- Oculis Studio
- Legal name
- [FULL LEGAL NAME]
- Address
- [POSTAL ADDRESS]
- ollie@oculis.studio
- ICO registration
- [NUMBER, or delete this row]
What we collect
When you get in touch
Enquiries reach us by email or Instagram message. We keep whatever you send — your name, email address, and what you tell us about the project — in our mailbox so we can answer it and refer back to it later. There is no contact form on the site collecting anything beyond that.
When we work together
We keep project records: your name and contact details, the brief, delivered files, comments and invoices.
When you buy a plugin
Purchases run through Lemon Squeezy, who are the seller of record. They take your payment and billing details — we never see or store card numbers. We receive your email address and order details so we can deliver the licence and support it. Lemon Squeezy handle their side under their own privacy policy.
Automatically
Our web host keeps standard server logs — IP address, page requested, browser, timestamp — for security and troubleshooting. We run no analytics, no advertising tags and no third-party trackers.
Some pages embed showreel video from YouTube, using YouTube's no-cookie player. It sets nothing until you press play; once you do, YouTube receives your IP address and device details under Google's privacy policy. Fonts are served from our own server, not a font CDN.
Why we are allowed to
- Answering enquiries — because you asked, and to take steps before a contract.
- Delivering commissioned work — to perform our contract with you.
- Supporting plugin licences — to perform our contract with you.
- Keeping invoices and tax records — a legal obligation.
- Keeping the site up and secure — our legitimate interest in running the business.
We do not send marketing email unless you ask for it, and you can stop it any time by replying and saying so.
Who else sees it
- Google (Firebase / Firestore) — stores project records on our behalf.
- Google (YouTube) — serves embedded showreel video, once you press play.
- Lemon Squeezy — sells the plugins and handles payment, as their own controller.
- [WEB HOST NAME] — hosts the site and its server logs.
We do not sell your data or share it for advertising. Some of these providers sit outside the UK; those transfers rely on the UK International Data Transfer Addendum or equivalent safeguards in the providers' terms.
How long we keep it
- Enquiry emails that do not become projects: [24 months], then deleted.
- Project records: six years after the final invoice, for tax and dispute purposes.
- Server logs: however long our host retains them, typically a few weeks.
Cookies and browser storage
This site sets no cookies and nothing follows you to other sites. The public pages — home, shop, product pages and filming — store nothing in your browser at all.
Your rights
Under UK GDPR you can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to have it sent somewhere else. Email ollie@oculis.studio and we will answer within one month.
If you are unhappy with how we handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can fix it.
Security
Project records live in Firestore behind server-enforced access rules and are readable only by studio accounts signed in with a password. The client portal is offline while its sign-in is rebuilt.
Changes
If this policy changes we will update the date at the top. Changes that affect current clients get an email as well.