top of page

LEGACY STUDIOS —
PRIVACY POLICY

Last updated: 24 October 2025

Legacy Studios is committed to protecting and respecting your privacy. This Privacy Notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this carefully to understand our views and practices regarding your personal data and how we will treat it.

​

The website (www.studionearme.uk) is operated by Legacy Group Limited (“we”, “us”, “our”, Legacy Studios), a company incorporated in England & Wales. Where we decide the purpose or means for the processing of the personal data that you provide when using our services, we are the “data controller” for the purposes of the UK GDPR. As a data controller, we will comply with all applicable data protection laws.

​

This Notice should be read together with our Terms & Conditions.

​

Data Protection Framework

​

Legacy Studios uses UK GDPR as the main framework for processing all personal data, except:

​

  • where national/federal/state/city regulations impose stricter requirements, or

  • where such regulations require additional processing not covered by UK GDPR.

​

We are registered with the ICO (UK Information Commissioner’s Office).


Our Data Protection Officer (DPO) is Mike Brandon, Head of Product Operations.

​

What Information We Collect

​

To enable you to book and use our studios, we may collect:

​

  • First & last name

  • Artist name (optional)

  • Email address

  • Telephone number

  • Username & password

  • Payment card details & billing address

  • Identification documents (retained securely for 3 years, with only hashed ID numbers kept beyond that)

  • First & last name of guests (deleted within 30 days unless needed for breach investigation)

​

We may also receive data from third parties who lawfully provide lead generation services (e.g. music-related platforms where you’ve made your information public).

​

How We Use Your Data (Lawful Basis)

​

  • Account creation & administration (contract)

  • Transactional correspondence (contract)

  • ID verification (legitimate interest)

  • Customer support (contract)

  • Service usage monitoring/analytics (legitimate interest)

  • Fraud prevention & investigation (legitimate interest/contract)

  • Marketing & lead generation (legitimate interest)

  • Targeted marketing (consent, where required)

  • Payment card usage post-booking (contract/legitimate interest)

​

Sharing Your Data

​

We only share your data when necessary, e.g. with:

  • Our staff and group companies,

  • Cloud providers, analytics tools, and payment processors (e.g. Stripe),

  • Service providers like Postmark (email delivery), Zendesk (support), or other partners where needed to provide services.

​

If we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

​

We will not share your data with third parties for marketing without your explicit consent.

​

Your Rights

​

Under UK GDPR you have rights to:

​

  • Be informed about processing

  • Access your data

  • Rectify inaccuracies

  • Request erasure

  • Restrict processing

  • Port your data (in machine-readable format)

  • Object to processing

  • Rights related to automated decision-making/profiling

​

To exercise any of these rights, email us at: info@studionearme.uk.

​

Data Deletion & Retention

​

  • You can request deletion via your account or by contacting us.

  • Personal data is generally deleted within 1 month of a valid request (subject to lawful grounds for retention).

  • ID documents are retained for 3 years; guest details for 30 days; CCTV up to 31 days (unless required for investigations).

  • Payment and invoicing data is retained for at least 6 years to meet legal obligations.

  • We may retain certain identifiers (e.g. email, phone, payment fingerprint) to prevent fraudulent re-registration.

​

Children

​

We do not knowingly collect or market to children under 13. If we discover such data has been collected, we will delete it promptly.

​

Security

​

We take appropriate technical and organisational measures to protect your data. However, no internet transmission is fully secure. Once received, your data is stored on secure servers. You are responsible for keeping your password confidential.

​

International Transfers

​

Our servers are based in the UK/EU. Some service providers may process data outside the UK/EU. Where transfers occur, appropriate safeguards (such as Standard Contractual Clauses) are applied.

​

Complaints

​

If you are unhappy with how we process your data, please contact us at info@studionearme.uk.
You may also complain to the UK ICO at: https://ico.org.uk/make-a-complaint/

​

Changes to this Notice

​

We may update this Notice occasionally. Any changes will be posted on our Website, and we encourage you to review it regularly.

​

Contact Us

​

Email: info@studionearme.uk

bottom of page