Privacy Policy
Last updated: 11 August 2026
Verosia Studio respects your privacy and is committed to protecting your personal information.
This privacy policy explains what information we collect, how we use it, who we may share it with and what rights you have.
Who we are
Verosia Studio is the trading name of Cranston Commerce Ltd.
We provide SEO, web design, content, social media and brand identity services for businesses.
Business name: Cranston Commerce Ltd, trading as Verosia Studio
Company number: NI722583
Location: Belfast / Carrickfergus, Northern Ireland
Email: nathan@verosiastudio.com
Website: https://www.verosiastudio.com
For the purposes of data protection law, Cranston Commerce Ltd is the data controller for the personal information described in this policy.
What personal information we collect
We may collect and use the following information:
-
your name
-
business name
-
email address
-
phone number
-
website address
-
social media handles
-
location
-
enquiry details
-
information you send through forms, email, WhatsApp, social media or other messages
-
notes from discovery calls, meetings or project conversations
-
information needed to prepare proposals, invoices, contracts and project work
-
website usage information, such as pages visited and how people interact with the site
-
marketing preferences, such as whether you have signed up to receive updates
We do not intentionally collect sensitive personal information unless you choose to provide it as part of a message, project or enquiry.
How we collect information
We collect information when you:
-
submit a form on our website
-
book a discovery call
-
contact us by email, phone, WhatsApp, social media or Messenger
-
sign up to receive updates
-
work with us on a project
-
provide files, images, content or access needed for project delivery
-
visit or interact with our website
We may also collect limited information from public sources where it is relevant to business research, outreach or project work, such as business websites, public social media profiles, Google Business Profiles and public directories.
How we use your information
We use your personal information to:
-
respond to enquiries
-
arrange calls or meetings
-
understand whether we may be a good fit to work together
-
prepare proposals, quotes, contracts and invoices
-
deliver agreed services
-
communicate about projects
-
manage client relationships
-
keep internal records
-
improve our website, services and marketing
-
send useful updates, where you have signed up or where this is otherwise allowed
-
meet legal, accounting and tax obligations
-
protect the business from fraud, misuse or legal claims
We do not sell your personal information.
Our lawful bases for using your information
Under UK data protection law, we need a lawful basis to use your personal information.
Depending on the situation, we may rely on:
Contract
When we need to use your information to prepare for, enter into or deliver a contract with you.
Legitimate interests
When we use your information to run and improve the business, respond to enquiries, manage client relationships, carry out business development or protect our legal interests.
Consent
When you actively agree to something, such as signing up to receive updates or accepting non-essential cookies.
Legal obligation
When we need to keep records or share information to comply with legal, tax or accounting requirements.
Marketing emails and updates
You may choose to sign up to receive updates from Verosia Studio.
These updates may include practical notes on websites, SEO, content, branding, case studies and digital growth.
You can unsubscribe at any time by using the unsubscribe link in the email or by contacting:
We will not knowingly add you to a general marketing list without a suitable lawful basis.
Cookies and analytics
Our website may use cookies and similar technologies to help the site work properly, understand how visitors use the site and improve the experience.
This may include tools such as Wix analytics, Google Analytics, Microsoft Clarity or similar website performance tools.
Some cookies are necessary for the website to function. Others, such as analytics or tracking cookies, may require your consent.
The ICO explains that analytics cookies are not treated as strictly necessary and usually require consent under PECR.
You can control cookies through your browser settings and, where available, through the cookie banner or preference tools on our website.
Tools and service providers we use
We use trusted third-party tools to run the business and deliver our services.
These may include:
-
Wix for website hosting and forms
-
Google services, including Google Analytics, Google Search Console, Gmail and Google Workspace
-
Plutio for client management, proposals and project communication
-
Xero or other accounting tools for invoicing and financial records
-
payment providers, where relevant
-
email marketing tools, where relevant
-
social media platforms such as Facebook, Instagram, LinkedIn, TikTok, YouTube and X
-
design, SEO, analytics, automation and content tools used to deliver client work
These providers may process personal information on our behalf where needed to provide their services.
We only share information where it is necessary for business operations, project delivery, legal compliance or communication.
AI-assisted tools
We may use AI-assisted tools to help with planning, research, drafting, analysis, admin or project delivery.
When using these tools, we aim to minimise the amount of personal or confidential information shared. Where possible, we remove unnecessary personal details or use anonymised information.
We do not intentionally use AI tools to make automated decisions about individuals that would have a legal or similarly significant effect.
Client files, images and project content
During a project, you may provide website content, photographs, videos, brand assets, customer information, login details or other materials.
We use these only to deliver the agreed work.
Where you provide images, testimonials or content that includes other people, you are responsible for making sure you have the right permission to share and use those materials.
We may showcase completed work in our portfolio, case studies or marketing only where this is appropriate and in line with the project agreement or permission given.
How long we keep information
We keep personal information only for as long as necessary.
Typical retention periods are:
-
enquiry records: up to 24 months after the last meaningful contact
-
client and project records: for the duration of the relationship and a reasonable period afterwards
-
accounting, invoice and tax records: normally up to 6 years, or as required by law
-
email marketing records: until you unsubscribe or ask us to remove you
-
website analytics data: according to the settings in the relevant analytics tools
-
proposal and sales records: as long as needed to manage business records, follow-ups and legitimate interests
We may keep some information for longer where necessary to resolve disputes, comply with legal obligations or protect the business.
International transfers
Some of the tools and platforms we use may process information outside the UK.
Where this happens, we rely on the safeguards provided by those platforms, such as contractual protections or recognised data transfer mechanisms.
How we protect your information
We take reasonable steps to protect personal information from loss, misuse, unauthorised access or disclosure.
This includes using reputable service providers, account security controls, password protection and limiting access to information where possible.
No online system is completely risk-free, but we aim to use sensible and proportionate safeguards for the type of information we handle.
Your rights
Under UK data protection law, you have rights over your personal information.
These may include the right to:
-
ask for a copy of the personal information we hold about you
-
ask us to correct inaccurate information
-
ask us to delete information in certain circumstances
-
ask us to restrict how we use your information
-
object to certain types of processing
-
withdraw consent where we rely on consent
-
ask for your information to be transferred in certain circumstances
-
complain to the Information Commissioner’s Office
The ICO provides guidance on individual rights under UK GDPR.
To make a request, contact:
We may need to confirm your identity before responding.
Complaints
If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.
You can contact us at:
You also have the right to complain to the Information Commissioner’s Office.
Website: https://ico.org.uk
Phone: 0303 123 1113
Changes to this policy
We may update this privacy policy from time to time.
When we make changes, we will update the “Last updated” date at the top of this page.
.png)