Your privacy, plainly
Privacy Notice
Your story belongs to you. We collect only what we need to answer, create and deliver.
Last updated: 24 July 2026
Who we are
BeyondStaticStudio is a trading name of Kno2gether Labs Ltd, the data controller. Kno2gether Labs Ltd is registered in England and Wales under company number 15454352. Registered office: Suite A, 82 James Carter Road, Mildenhall, Ipswich, IP28 7DE.
Privacy enquiries and data-rights requests: [email protected].
Information we collect
- Enquiries: your name, email address, proposed date, story or project details, consent choice and enquiry reference.
- Project delivery: contact details, brief, assets you supply, approvals, correspondence, invoices and contractual records.
- Technical security data: a one-way, short-lived hash used to rate-limit form abuse. We do not retain the raw IP address in the enquiry database.
- Optional aggregate analytics: conversion name, page path and referring hostname, only after you select Allow. These records contain no name, email, cookie identifier or persistent visitor ID.
Please do not send sensitive personal information about guests or children through the initial enquiry form. We will agree a secure transfer method if a project needs such material.
Why we use it
- To answer an enquiry and take steps requested before a contract — UK GDPR Article 6(1)(b).
- To create and deliver contracted services, administer payment and keep required business records — contract and legal obligation.
- To protect the form and service from abuse — our legitimate interest in operating a secure service.
- To measure aggregate conversions — your consent, which you can withdraw through Privacy choices in the site footer.
We do not sell personal information or use it for automated decisions.
Who receives it
We use Cloudflare for website delivery, API processing, security and EU-region database storage; Resend for transactional email; and our professional service providers where necessary for accounting, legal compliance or project delivery. Each provider receives only what it needs for its role.
Some providers may process information outside the UK. Where that happens, we rely on applicable adequacy regulations or approved contractual safeguards.
How long we keep it
Unconverted enquiries are kept for up to 12 months. Contract, invoice and tax records may be kept for up to seven years. Project assets are retained for the agreed delivery and support period, then deleted or archived as agreed. Short-lived security rate-limit records expire automatically.
Your rights
Depending on the circumstances, you may ask us for access, correction, deletion, restriction, portability, or to object to processing. You can withdraw analytics consent at any time without affecting earlier lawful processing. Email us to exercise a right; we may need to verify your identity.
You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve your concern first.
Changes
We review this notice at least annually and whenever our services or providers materially change. The current version is always published here.