Privacy & cookies

Who we are

This website, mandyceline.com, is operated by Breadbox Studios Ltd on behalf of director Mandy Celine.

Breadbox Studios Ltd is registered in England and Wales (company number 14729809) and is the data controller for personal information collected through this website.

If you have any questions about this notice or how your information is handled, email hello@mandyceline.com.

What we collect

When you contact us through the website, we may collect:

• Your name and email address.
• The type of enquiry you select.
• Information you include in your message.
• Any additional information you choose to provide during subsequent correspondence.

If you email us directly, we receive your email address and the information contained in your message.

When you visit the website, Squarespace and other services used by the site may automatically process technical information, including your IP address, browser and device information, pages visited and how you arrived at the site.

Some of this information may be personal data, even where the statistics available to us are aggregated.

Why we use your information

We use personal information to:

• Respond to enquiries and discuss potential projects.
• Manage professional bookings and working relationships.
• Maintain the security and functionality of the website.
• Understand how visitors use the site and improve its content.
• Meet applicable legal and accounting obligations.

Our lawful bases under UK data protection law include:

• Legitimate interests: responding to professional enquiries, operating our business and maintaining website security, where those interests are not overridden by your rights.
• Contract or steps before a contract: discussing and arranging work at your request and fulfilling agreed services.
• Legal obligations: retaining records where required by law.
• Consent: where required for optional cookies or similar technologies.

We do not sell your personal information.

We will not add you to a marketing mailing list without an appropriate lawful basis, including consent where required.

Who else handles your information

We use selected third-party services to operate the website and communicate with visitors.

These may include:

• Squarespace, which hosts the website and processes contact form submissions and website information.
• Our email provider, which processes and stores correspondence.
• Vimeo and Frame.io, where videos are embedded or delivered through their services.
• Analytics and security providers, where enabled on the website.

These services may process technical information when their content or features load, including information about your browser, device and IP address.

Some providers act as processors on our behalf, while others may process certain information under their own privacy terms.

We share information only where reasonably necessary to operate the website, respond to enquiries, provide services or meet legal obligations.

International data transfers

Some of the services we use may process or store personal information outside the United Kingdom, including in the United States.

Where UK data protection law requires safeguards for an international transfer, we rely on an appropriate lawful transfer mechanism, such as applicable UK adequacy regulations or approved contractual safeguards.

How long we keep information

We generally retain routine enquiries for up to two years after our last meaningful contact, unless there is a legitimate reason to retain them longer.

Where an enquiry leads to a professional engagement, relevant contractual, financial and business records may be retained for approximately six years, or longer where required by applicable law or necessary to establish, exercise or defend legal claims.

We may delete information sooner where it is no longer needed, subject to applicable legal requirements.

Cookies

Cookies and similar technologies help websites operate and, where permitted, provide information about how visitors use them.

This website may use:

• Essential cookies: necessary for the website's operation, security and remembering your privacy preferences.
• Analytics cookies: used to understand website traffic and visitor behaviour.
• Third-party media cookies or similar technologies: which may be used by embedded video providers.

Where consent is required, non-essential cookies and similar technologies will only be used after you have given your permission.

You can accept or reject optional cookies through the website's cookie banner and change your preferences using the cookie settings option, where available.

You can also manage cookies through your browser settings.

Your rights

Under UK data protection law, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate information.
• Request deletion of your information.
• Object to certain uses of your information.
• Ask us to restrict how your information is processed.
• Request transfer of certain information to another provider, where applicable.
• Withdraw consent where processing relies on consent.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, email hello@mandyceline.com. We will normally respond within one month, as required by law.

If you are unhappy with how your personal information has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.

We would appreciate the opportunity to address your concerns first.

Changes to this notice

We may update this Privacy & Cookies notice to reflect changes to the website, the services we use or applicable law.

When we make changes, we'll publish the updated notice here and revise the date at the top.

Contact