Privacy

This notice explains how Casa Selvedge Creative Agency Ltd ("Casa Selvedge", "we", "us") collects, stores and uses personal data when you visit our website, contact us, book a call, or become a customer. We are a UK company registered in England & Wales and act as the data controller for the data described below under the UK General Data Protection Regulation and the Data Protection Act 2018.

1. What we collect

• Identity & contact data ... name, business email, brand name, Shopify URL.
• Commercial data ... billing address, VAT number, payment metadata. We do not store card numbers; payments are processed by Stripe.
• Brand assets you share ... product photos, brand references, brand guidelines, social handles.
• Usage data ... pages visited, referrer, anonymised analytics signals (no cross-site tracking).

2. Why we use it

• To respond to enquiries and run discovery calls.
• To deliver creative services you have asked us to deliver.
• To bill you under the contract you signed.
• To improve our generation pipeline (assets you share are not used to train any model except your own brand-trained model, and are deleted within 30 days of contract end on request).

3. Lawful bases

We rely on (a) contract for service delivery, (b) legitimate interests for responding to enquiries and basic site analytics, and (c) consent where required (e.g. case study publication). You can withdraw consent at any time.

4. Sharing

We share data only with the processors needed to run the studio: Stripe (billing), Cloudflare (hosting), Replicate (model inference), Google Workspace (mail / calendar), Notion (client portal), and Cal.com (booking). Each is contractually bound to UK GDPR-compatible terms.

5. International transfers

Some processors are based outside the UK / EEA (notably Replicate and Stripe US). Where transfers occur, we rely on UK Adequacy Regulations or Standard Contractual Clauses with appropriate safeguards.

6. Retention

Enquiry data is retained for 18 months. Customer data is retained for the duration of the contract plus 6 years for tax purposes. Brand assets are deleted within 30 days of contract end on written request.

7. Your rights

You may request access, correction, deletion or portability of your data, restrict or object to processing, or lodge a complaint with the Information Commissioner's Office. To exercise any right, write to privacy@selvedge.co.

8. Cookies

We use only strictly-necessary and self-hosted analytics cookies. We do not use advertising trackers, Meta Pixel, or third-party retargeting. Where we embed Cal.com or Stripe Checkout, those services may set their own cookies; refer to their notices.

9. Changes

We will update this notice and post a new "last updated" date when we change anything material.

10. Contact

Casa Selvedge Creative Agency Ltd · 3rd Floor, 86–90 Paul Street, London EC2A 4NE · privacy@selvedge.co