Privacy Statement

Ecosystem Studio Ltd

Registered in England & Wales. Company No. 17012998

Registered Address: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE

Last updated: 5 August 2026

Who we are

Ecosystem Studio Ltd ("Ecosystem Studio", "we", "us", "our") is a Bristol-based consultancy providing ecosystem building, facilitation, event design, and advisory services. We are the data controller for the personal information described in this statement.

Company number: 17012998 Registered address: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE Contact: briony@ecosystemstudio.co.uk ICO registration number: C1999996

If you have any questions about this statement or how we handle your data, you can reach us at the email above. If you're unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

‍What this statement covers

This statement explains how we collect, use, and protect personal data when you:

  • Visit ecosystemstudio.co.uk

  • Sign up to our newsletter or mailing list

  • Join a paid membership or subscribe to our digital products

  • Contribute data via our community Google Forms

  • Book onto or attend an event through Eventbrite or similar

  • Get in touch with us by email or a contact form

  • Work with us as a client, collaborator, or supplier

‍The information we collect

Information you give us directly

  • Name, email address, and any details you include when you contact us, sign up, or fill in a form

  • Payment and billing details when you purchase a membership or subscription (processed securely by our payment provider, not stored by us)

  • Information you contribute to our community dataset via Google Form

  • Event booking details, including dietary or access requirements where relevant

Information collected automatically

  • Standard website usage data (pages visited, browser type, approximate location, referring site) via cookies and analytics

  • Login and activity data if you hold a Member Area account on our site

We do not collect special category data (such as health information) unless you choose to share it with us, for example as an access requirement for an event, and we only use it for that specific purpose.

Why we use your information, and our lawful basis

Purpose / Lawful basis

Providing membership access and the ecosystem dataset you've subscribed to / Contract

Processing payments / Contract

Sending you the newsletter or updates you've signed up for / Consent

Responding to enquiries and correspondence / Legitimate interests

Running events you've booked onto / Contract / Legitimate interests

Improving our website and services / Legitimate interests

Meeting our legal and accounting obligations / Legal obligation

Where we rely on consent, for example for marketing emails, you can withdraw it at any time by unsubscribing or contacting us directly.‍ ‍

Who we share your information with

We use a small number of trusted service providers to run Ecosystem Studio, and your data may be processed by:

  • Squarespace, who hosts our website and Member Areas

  • Stripe, who processes payments securely; we do not see or store full card details

  • Google, for our community contribution form and general workspace tools

  • Eventbrite, for event bookings and management

  • Xero, for our accounting and invoicing

  • Our email provider, for newsletter and mailing list communication

We only share what each provider needs to do their job, and we have agreements in place with them covering how they handle your data. We do not sell your personal information to anyone, and we don't share it with third parties for their own marketing purposes.

Some of these providers may process data outside the UK or EEA. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum.

How long we keep your information

We keep personal data only as long as we need it for the purpose it was collected, or as required by law. As a guide:

  • Client and financial records: 6 years, in line with UK tax requirements

  • Newsletter and marketing contacts: until you unsubscribe or ask us to delete your data

  • Community dataset contributions: 36 months

  • Enquiry and correspondence records: 24 months

Your rights

Under UK GDPR, you have the right to:

  • Ask what personal data we hold about you, and get a copy of it

  • Ask us to correct inaccurate data

  • Ask us to delete your data, where applicable

  • Object to or restrict certain processing

  • Ask for your data in a portable format

  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at briony@ecosystemstudio.co.uk. We'll respond within one month.

‍Cookies

‍Our website uses cookies to help it function properly and to understand how visitors use the site. You can manage or disable cookies through your browser settings, and where required by law we'll ask for your consent before setting non-essential cookies.

Keeping your information secure

‍We take reasonable technical and organisational steps to protect your personal data against loss, misuse, or unauthorised access, including secure hosting, access controls, and working only with providers who meet appropriate security standards.

Changes to this statement

We may update this statement from time to time, for example as our services evolve or regulations change. We'll update the date at the top of this page when we do.

Get in touch

If you have any questions, concerns, or requests relating to your personal data, please contact us at briony@ecosystemstudio.co.uk