Privacy Policy

This privacy policy sets out how we, Altosi Ltd, trading as Wild Rose Studio, use and protect any information that you give us when you use this website.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

We may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 10 August 2025.

Who we are

Altosi Ltd (trading as Wild Rose Studio) is the data controller for this website. Company number: 6712851. Registered office: Park House, 10 Park Street, Bristol, United Kingdom, BS1 5HX. ICO registration number: ZA248091.

You can contact us at: info@wildrosestudio.co.uk

What we collect

When you browse our website, we collect limited technical information automatically for security and operational purposes (for example, server logs). This includes your IP address, pages viewed and basic device/browser details. This information may constitute personal data under UK GDPR. If you contact us by email, we will process your email address and any information you include in your message in order to respond. We do not currently use analytics or advertising cookies.

Planned services (e‑commerce and print‑on‑demand): If/when we enable purchases on our site, we will collect and process the following data to fulfil your order:

  • Contact and order details: name, email address, billing and shipping addresses, items ordered
  • Payment information: payment intent identifiers and status provided by our payment processor (we do not store full card details)
  • Fulfilment information: we will share necessary shipping details with our print‑on‑demand drop‑shipping supplier to deliver your order

What we do with the information we gather

We use information to:

  • operate and improve our website and services
  • respond to enquiries
  • process payments and fulfil orders (when e‑commerce is enabled)
  • prevent fraud and ensure the security of our services
  • meet our legal and tax obligations

Lawful bases: We rely on one or more of the following UK GDPR bases: performance of a contract (e.g. fulfilling an order), legitimate interests (e.g. site security and preventing fraud), legal obligation (e.g. tax and accounting), and consent (e.g. optional analytics or marketing, if introduced).

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

How we use cookies

Cookies (and similar technologies like local storage) help the site function. We currently use only essential technologies necessary to operate core features (e.g. remembering cookie preferences). If we introduce analytics or other optional cookies in the future, we will request your consent first and you can change your preferences at any time.

Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline them if you prefer.

Non‑essential cookies and tracking

As of the effective date above, we do not use any non‑essential cookies (such as analytics or marketing cookies) or similar tracking technologies on this website.

If we start using non‑essential cookies in the future, this section will list each category and provider, including the purpose, provider name, data collected, retention period, and a link to the provider’s privacy policy. You will be asked for consent before they are set and you can change your choices at any time via the “Cookie settings” link in the footer.

Links to other websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information that you provide whilst visiting such sites; such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Sharing your information

We do not sell your personal information. We may share it with service providers acting on our behalf and under contract, such as:

  • payment processor (Stripe) to process payments
  • print‑on‑demand drop‑shipping supplier (for fulfilment, when enabled)
  • website hosting, caching and content delivery providers

These providers act as our processors and only process your data as instructed by us.

International transfers: Where data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

Data retention

We keep data only for as long as necessary for the purposes described above:

  • order and invoice records: up to 7 years for tax/accounting
  • enquiry emails: up to 24 months
  • cookie preferences: until you clear them or we change the technology
  • server logs (including IP addresses): typically 90 days, longer only when investigating security incidents

Your rights (UK GDPR)

You have rights over your personal data, including the right of access, rectification, erasure, restriction, objection, and data portability. Where processing is based on consent, you can withdraw consent at any time.

To exercise your rights, contact us at info@wildrosestudio.co.uk. We may need to verify your identity. We will respond within one month, or explain if more time is required due to complexity.

If you have concerns about how we handle your data, you can lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first.

Direct marketing

We do not currently run a newsletter or send direct marketing. If this changes, we will ask for your consent and you can opt out at any time.

Changes to this policy

We may update this policy to reflect changes in our services or applicable laws (including the UK GDPR, the Data Protection Act 2018 and PECR). Material changes will be highlighted on this page.

Altosi Ltd Privacy Policy, Version 2.0, 10 August 2025