Your information
Privacy notice
Last updated 4 September 2026
Who controls your information
Winchwork Limited, trading as Winchwork Studios, is the controller of personal information collected through this website. It is registered in Scotland under company number SC863269 at 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN.
For privacy questions, use our contact form or email Enable JavaScript to view.
What we collect
When you use the contact form, we collect your name, email address, selected enquiry type and the message you provide. Our server also temporarily uses your IP address to limit spam submissions.
Why we use it
We use this information to read, manage and respond to your enquiry, protect the form against misuse and keep a necessary record of our correspondence.
Our lawful basis is our legitimate interest in communicating with people who contact the studio and protecting our website. Where your enquiry concerns a possible contract, we may also process it to take steps at your request before entering into that contract.
Who receives it
Authorised people working for Winchwork Limited may access enquiries. Our website-hosting and email-service providers process information only as needed to deliver and protect the form and email. We do not sell contact details or use form enquiries for unrelated marketing.
How long we keep it
Spam-prevention records are kept for up to one hour. Enquiries are normally kept for no longer than 12 months after our last contact, unless we need them longer for a contract, dispute or legal obligation.
International processing
If a service provider processes information outside the UK or European Economic Area, we require an appropriate lawful transfer mechanism and safeguards under applicable data-protection law.
Cookies and tracking
This website does not intentionally set advertising or analytics cookies. It does not load third-party analytics or remotely hosted fonts. External websites you choose to visit have their own privacy and cookie practices.
Your rights
Depending on the circumstances, you may ask us for access to your information, correction, deletion, restriction, portability, or to object to our use of it. You may object at any time to processing based on legitimate interests. These rights can have legal exceptions.
Contact us using the details above to exercise a right. We may need to confirm your identity.
Complaints
Please contact us first so we can try to resolve your concern. You can also complain to the UK Information Commissioner’s Office. If EU GDPR applies to you, you may also complain to the data-protection authority where you live or work, or where you believe an infringement occurred.
Changes
We may update this notice when our website or data practices change. The current version and its date will remain available on this page.