Privacy Policy

1. Who we are

Backroom Studio Ltd ("we", "us", "our") is an independent product studio that builds web and mobile applications and provides related software services. We are the data controller responsible for your personal data.

• Legal entity: Backroom Studio Ltd
• Company registration number: 17282807
• Registered address: Flat 402 Dunlip House, 2 William Murdoch Road, London E14 0YH, United Kingdom
• Contact: contact@backroomstudio.dev
• Website: https://backroomstudio.dev

If you have any questions about this policy or how we handle your personal data, contact us at the email above.

2. Scope

This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have. It applies to visitors to this website, people who contact us, our clients, and end users whose data we process when providing services to clients or operating on marketplaces and platforms such as TikTok Shop.

3. What personal data we collect

Depending on how you interact with us, we may collect:

• Contact & enquiry data: your name, email address, and the contents of messages you send us (for example through our contact form or by email).
• Client & project data: information needed to deliver a project or service, including billing details and project communications.
• End-user / merchant data: where we build or operate software on behalf of a client or platform, we may process personal data on their behalf (acting as a processor), such as order and account information.
• Payment data: we do not store full card numbers. Payments are handled by our payment providers; we receive only confirmation and limited transaction references.
• Technical data: IP address, device and browser type, and analytics/cookie data when you visit this website.

4. How we use your data and our legal bases (UK/EU GDPR)

Purpose	Legal basis
Responding to enquiries and providing quotes	Legitimate interests / steps prior to a contract
Delivering projects and services to clients	Performance of a contract
Processing data on behalf of clients/platforms	Processor acting on documented instructions
Complying with tax, accounting and legal obligations	Legal obligation
Securing our systems and preventing fraud	Legitimate interests
Website analytics & improvement	Consent (analytics cookies) / legitimate interests

You can withdraw consent at any time where we rely on it.

5. Who we share data with

We share personal data only where necessary, with:

• Cloud & IT service providers that host our systems and tools (acting as our processors under contract).
• Platforms & marketplaces (e.g. TikTok Shop) where we provide services or fulfil orders.
• Payment providers to process payments.
• Professional advisers and authorities where required by law.

We do not sell your personal data.

6. International transfers

We primarily store and process personal data within the European Economic Area (EEA). Where a provider processes data outside the EEA, we ensure appropriate safeguards are in place, such as an adequacy decision or Standard Contractual Clauses.

7. How long we keep data

• Enquiry & contact data: typically up to 24 months after our last contact, unless a project begins.
• Client & transaction records: retained for the period required by tax and accounting law (typically up to 6–7 years).
• Data processed on behalf of clients: retained per the client's instructions and deleted at the end of the engagement, except where law requires longer retention.

When data is no longer needed, we securely delete or anonymise it. At the end of a contractual relationship, we delete the personal data in our possession, except records we are legally required to retain.

8. How we protect your data

We apply appropriate technical and organisational measures, including access controls on a least-privilege basis, multi-factor authentication, encryption of data in transit and at rest, antivirus protection on devices, network segregation, and documented information security, incident response, and data protection policies.

9. Your rights

Under UK/EU data protection law you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time; and
• lodge a complaint with a supervisory authority.

To exercise any right, contact us at contact@backroomstudio.dev. We respond within one month. Where we process data on behalf of a client or platform, we will assist them in handling your request, including requests routed through TikTok Shop.

You may also complain to the relevant supervisory authority — for example, your local EU data protection authority, or the UK Information Commissioner's Office (ico.org.uk).

10. Cookies

This website uses cookies and similar technologies for essential functionality and, with your consent, for analytics. You can manage cookies through your browser settings.

11. Children

Our services are not directed at children under 16, and we do not knowingly collect their personal data.

12. Changes to this policy

We review this policy regularly and at least annually. We will post any updates here with a revised "Last updated" date.

13. Contact

Backroom Studio Ltd
Flat 402 Dunlip House, 2 William Murdoch Road, London E14 0YH, United Kingdom
contact@backroomstudio.dev