Last updated: 1 October 2026

At Ross Marshall Studio, we tell stories for a living. This page tells a shorter one: what personal information we collect when you visit rossmarshall.studio or get in touch, why we collect it, and the choices and rights you have. We've kept it as clear and brief as we can.

1. Who we are

This website is run by Ross Marshall Studio Ltd ("Ross Marshall Studio", "we", "us" or "our"), a private limited company registered in England and Wales under company number 15726216.

• Registered office: 1a Halton Lane, Wendover, Aylesbury, Buckinghamshire, HP22 6AR, United Kingdom

• Email: ross@rossmarshall.studio

We are the data controller for the personal information described in this policy. This means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

[CONFIRM: ICO data protection fee registration number, if you have one, e.g. "We are registered with the Information Commissioner's Office under registration number ZAxxxxxx." Delete this note if not applicable.]

2. The information we collect

When you email us. Our website has no forms; to get in touch, you email us at ross@rossmarshall.studio. When you do, we receive your name, your email address and anything you choose to include, such as your company, job title, phone number, project details or attachments. We may also save your name and contact details in the contact list in our website dashboard so we can keep track of our conversation.

If we work together. If your enquiry turns into a project, we'll also hold the business contact details, correspondence, briefs, quotes, purchase orders and invoicing information we need to deliver the work and get paid.

When you browse our website. Like most websites, ours automatically collects some technical information when you visit. This includes your IP address, browser and device type, the pages you view, the website that referred you, and the date and time of your visit. This is collected by Wix, the platform that hosts our website. It helps keep the site secure and working properly, and it gives us basic statistics about visits that we can see in our Wix dashboard.

Cookies. Our website uses a small number of essential cookies. See section 7.

We don't ask for, and don't want to receive, sensitive information, for example about health, religion or ethnicity. Please don't include it in your emails.

3. How we use your information, and our lawful basis

The law requires us to have a lawful basis for each way we use your information. Here's what we do and why:

• Replying to your enquiry and discussing a potential project. Lawful basis: our legitimate interests in responding to people who contact us and in running our business. Where you've asked us to quote for work, it is also a step you've asked us to take before entering into a contract.

• Delivering a project and managing our relationship with you or your organisation. Lawful basis: performing our contract with you. Where the contract is with your employer or client, the basis is our legitimate interests.

• Keeping financial and business records. Lawful basis: complying with our legal obligations, for example tax and company law.

• Keeping our website secure, working well, and understanding how it is used in general. Lawful basis: our legitimate interests in running a safe, reliable website.

• Setting essential cookies. These are strictly necessary for the website to work, so we don't need your consent for them (see section 7).

Where we rely on legitimate interests, we've considered your rights and are satisfied that our use is proportionate and is what you'd reasonably expect.

We don't sell your information. We don't use it for automated decision-making or profiling. We don't add you to marketing mailing lists without your permission.

4. How long we keep your information

[CONFIRM: these periods are proposed defaults. Please check that they suit how you work.]

• Enquiries (emails and the matching entry in our contact list): 24 months from our last contact, unless we go on to work together.

• Client and project records: for the length of the project and then 6 years after it ends, so we can meet our legal, tax and accounting obligations and deal with any questions or claims.

• Website technical and statistics data: kept by Wix in line with its own retention periods.

• Cookies: each cookie lasts for the period shown in Wix's cookie list (see section 7).

When we no longer need information, we delete it securely or anonymise it.

5. Who we share your information with

We only share personal information with organisations that help us run our business, and only as much as they need:

• Wix.com Ltd (website platform). Wix hosts our website, provides our website dashboard and contact list, and collects the technical and statistics data described above. Our showreel video and project galleries are hosted and served by Wix too, so watching them doesn't involve YouTube, Vimeo or any other third-party video service. Wix acts as our processor and handles data under its own privacy and security commitments: www.wix.com/about/privacy

• Google (email). Our business email, ross@rossmarshall.studio, is provided by Google, so emails you send us are stored on Google's systems. [CONFIRM: that your email is Google Workspace. The domain's mail records point to Google's mail servers.]

• Professional advisers. We may share information with our accountants, lawyers or insurers where needed. [CONFIRM]

• Authorities. We may share information where the law requires it, or to protect our rights.

Our website does not use advertising pixels, social media plugins or embedded third-party video players.

[CONFIRM: this policy assumes the leftover Google Analytics tag (UA-122555731-1, set up for the previous template owner's domain) has been deleted from Marketing Integrations before the page goes live. If you want to use Google Analytics, set up your own GA4 property, turn on the Wix cookie banner, and add a Google Analytics paragraph here and in section 7.]

6. International transfers

Wix.com Ltd is based in Israel. The UK recognises Israel as providing an adequate level of protection for personal data. Wix stores data in data centres in the United States and Ireland, and uses group companies and service providers in other countries. Where personal data is transferred to a country that the UK has not recognised as adequate, Wix relies on standard contractual clauses together with additional technical, contractual and organisational safeguards.

Google may also process email data outside the UK, including in the United States, and protects it with its own recognised transfer safeguards. [CONFIRM]

7. Cookies

Cookies are small text files that a website stores in your browser. Our website only uses the essential cookies that Wix sets to deliver the site securely and reliably. Examples include XSRF-TOKEN, svSession, hs, bSession and ssr-caching, plus a security cookie (__cf_bm) used by Wix's network to tell people apart from automated bots. Because these cookies are strictly necessary, the Privacy and Electronic Communications Regulations (PECR) don't require us to ask for your consent before using them, and we don't currently show a cookie banner.

We don't use advertising or marketing cookies.

You can see the full list of cookies Wix may set, with what each one does and how long it lasts, in Wix's guide "Cookies and Your Wix Site": https://support.wix.com/en/article/cookies-and-your-wix-site

You can block or delete cookies in your browser settings, but parts of the website may not work properly if you do.

8. Your rights

Under UK data protection law, you have the right to:

• Access: ask for a copy of the personal information we hold about you.

• Rectification: ask us to correct information that is wrong or incomplete.

• Erasure: ask us to delete your information.

• Restriction: ask us to limit how we use your information.

• Objection: object to us using your information where we rely on legitimate interests.

• Data portability: ask us to send information you gave us to you, or to another organisation, in a commonly used electronic format, where this applies.

• Withdraw consent: where we rely on your consent, you can withdraw it at any time.

Some rights only apply in certain circumstances. If we can't fully meet a request, we'll explain why.

9. How to make a privacy request

Email ross@rossmarshall.studio with "Privacy request" in the subject line and tell us what you'd like us to do. You can also write to us at our registered office address in section 1.

Making a request is usually free. We may need to ask you to confirm your identity before we act on it. We'll respond within one month. If your request is complex, we may need up to two more months, and we'll let you know if that's the case.

10. Complaints

If you're unhappy with how we've handled your information, please talk to us first at ross@rossmarshall.studio, and we'll do our best to put things right.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

• Website: ico.org.uk

• Helpline: 0303 123 1113

11. Keeping your information safe

Our website is served over a secure, encrypted (HTTPS) connection. We use reputable providers and take sensible steps to protect the information we hold. No method of sending information over the internet is completely secure, though, so please think carefully before emailing us anything confidential.

12. Children

Our website and services are aimed at businesses and are not directed at children. We don't knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time, for example if we start using a new tool or the law changes. When we do, we'll change the "Last updated" date at the top of this page, and we'll highlight any significant changes. Please check back now and then.

Last updated: 1 October 2026