Privacy Policy
1. Introduction
Right On Studio Ltd t/a A RUM FELLOW (“A RUM FELLOW”, “we”, “our”, “us”) is committed to protecting and respecting your privacy.
This Privacy Policy explains:
What information we collect
How we use it
How long we keep it
Whether we share it
Your rights and choices regarding your data
We are committed to transparency, accountability and responsible data handling in line with UK GDPR and our values.
For the purposes of UK data protection law, Right On Studio Ltd t/a A RUM FELLOW is the Data Controller.
2. What Information We Collect
We only collect information that is necessary to operate our business and provide our services.
When You Place an Order
We collect:
Full name
Billing address
Delivery address
Email address
Telephone number
Order history
Payment details
Payment security: Payment details are processed securely by third-party payment providers. We do not store full card details on our systems.
When You Contact Us
If you email us, subscribe to our newsletter, or complete a website form, we may collect:
Name
Email address
Any information you choose to provide
Website Usage Information
When you use our website, we may automatically collect technical information, including:
IP address
Browser type and version
Time zone setting
Operating system and platform
Pages viewed and products searched
Page response times
Length of visits
Clickstream data
This information is used for analytics and website improvement and is anonymised or pseudonymised where possible.
Suppliers, Trade Customers & Collaborators
We may collect:
Business contact details
Payment information
Relevant credentials or documentation required to fulfil contracts
Job Applicants
If you apply to work with us, we may collect:
CV and portfolio
Reference information
Optional diversity information (voluntarily provided)
We do not intentionally collect special category data unless it is necessary and explicitly provided by you.
3. How We Use Your Information
We use personal data only where lawful and necessary. This includes:
Processing and fulfilling orders
Delivering products
Managing customer service enquiries
Managing supplier and trade relationships
Operating and improving our website
Maintaining financial and tax records
Complying with legal obligations
Sending marketing communications (where you have opted in)
We do not sell your data to third parties.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
Contract – to process and deliver your order
Legal obligation – for tax and accounting compliance
Legitimate interests – to operate and improve our business
Consent – for email marketing and non-essential cookies
5. Marketing & Email Communications
All email marketing and list-building activities are GDPR compliant.
You will only receive marketing emails if you have opted in or if we are legally permitted to contact you.
Every marketing email includes an unsubscribe link.
You can withdraw consent at any time.
We maintain records of consent and update preferences promptly.
You are always in control of how your data is used for marketing.
6. Data Sharing
We may share your information with trusted third-party service providers, including:
Payment processing providers
Delivery and courier services
IT and website hosting providers
Professional advisers (accountants, legal advisers)
All third parties are required to handle your data securely and in accordance with data protection law.
We do not give or sell your personal information to unrelated third parties for marketing purposes.
7. International Transfers
If any personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.
8. Data Retention
We retain data only for as long as necessary:
Customer purchase and financial records: 7 years (for tax and accounting compliance)
Supplier/subcontractor records: 7 years
Marketing data: until you unsubscribe or withdraw consent
Job applicant data: 6 months, unless you consent to longer retention
After this period, data is securely deleted or anonymised.
9. Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate information
Request deletion of your data
Restrict or object to processing
Withdraw consent at any time
Request data portability
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, contact:
studio@arumfellow.com
We aim to respond within one month.
10. Data Security
We are committed to ensuring your information is secure.
We have implemented appropriate technical and organisational measures to safeguard personal data against unauthorised access, alteration, disclosure, or loss.
11. Cookies
Our website uses cookies to:
Enable essential website functionality
Improve performance and user experience
Analyse website traffic
You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect website functionality.
Some third-party services (such as analytics providers) may also use cookies. We do not control these cookies and recommend reviewing their policies.
12. Third-Party Websites
Our website may contain links to other websites. These websites have their own privacy policies, and we do not accept responsibility or liability for them. Please review their policies before submitting personal data.
13. Transparency & Annual Review
This Privacy Policy is publicly available and reviewed annually to ensure continued compliance with UK GDPR and evolving best practice.
We also review our ICO registration status annually using the ICO self-assessment tool and will register if required.