Privacy & cookies
Last updated 25 October 2026
01 / Who is responsible
Upper Studio is the trading name of UPPER STUDIO LTD, registered in England and Wales under company number 06837582. Registered office: 4th Floor, 63/66 Hatton Garden, London, EC1N 8LE, United Kingdom.
Email: info@upperstudio.com.
This notice covers this portfolio website and enquiries made to Upper Studio. It also explains our role when handling imagery. Where a separate project agreement or privacy notice applies, read it alongside this notice.
02 / Information we handle
If you contact us, we receive what you choose to send, such as your name, business details, email address, correspondence and project brief. Please do not send information that is unnecessary for your enquiry.
Serving and protecting the website involves technical information such as IP address, requested URL, date and time, browser and device details, and security or error information. Hosting, network and email providers may process this information to deliver and secure their services.
Portfolio imagery can contain identifiable people and creative credits. Client project material can also contain personal information. A photograph is not treated as biometric identification data merely because a face appears in it.
03 / Purposes and lawful bases
- Enquiries and project discussions
- To respond, prepare a quotation and take steps at your request before entering a contract; or, for business contacts, our legitimate interest in communicating about relevant work.
- Delivering agreed services
- To perform a contract with you, administer a business engagement, or process material under a client’s documented instructions.
- Website delivery, security and troubleshooting
- Our legitimate interests in operating a reliable portfolio and protecting the service and visitors.
- Portfolio presentation and credits
- Our legitimate interest in demonstrating commissioned and creative work, balanced against the rights and reasonable expectations of the people shown, and subject to the relevant permissions and applicable law.
- Legal, accounting and dispute matters
- To meet legal obligations, or our legitimate interests in maintaining appropriate records and establishing, exercising or defending legal claims.
Where processing requires consent, we will seek it for the relevant purpose. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
04 / Client images and our role
When we handle client-supplied material solely under a client’s instructions, the client normally determines the purposes and acts as controller; Upper Studio acts as processor under the agreed engagement and applicable data-processing terms. Requests concerning that material should normally be directed to the relevant client, and we will assist as required.
We are responsible as controller for our own business correspondence and the portfolio presentation we determine. If you are identifiable in displayed work and have a concern, contact us with the page and relevant details so that we can investigate.
05 / Who receives information
Information may be handled by authorised studio personnel and service providers where necessary for the purposes above, including hosting and content-delivery providers, email and IT providers, professional advisers and appropriately engaged production collaborators. We limit access according to the work being carried out.
This version is hosted using Sites infrastructure and Cloudflare delivery. Some existing project images may be requested from Upper’s legacy media host, admin.upper.film. Those servers receive the technical information needed to serve an image. We do not sell personal information.
We may disclose information when legally required or where necessary and lawful to protect rights, investigate misuse or manage a business transfer, with appropriate safeguards.
06 / International handling
Our work and service providers can involve processing outside the United Kingdom. Where UK data-protection law requires safeguards for a restricted transfer, those safeguards must be in place, for example a relevant adequacy regulation or an approved transfer mechanism with any necessary assessment and supplementary measures. Contact us for information about safeguards relevant to your engagement.
07 / How long information is kept
We keep enquiry correspondence only for as long as needed to respond, manage a genuine business follow-up and address related issues. Where an enquiry becomes a project, relevant correspondence becomes part of the project record.
Project and business records are kept according to the engagement, ongoing need, applicable accounting and legal obligations, and the period reasonably required to resolve disputes. Client-controlled production files are handled in accordance with the agreed return or deletion instructions. Portfolio material is reviewed against its continuing relevance and the permissions and legitimate interests supporting publication.
Technical and security information is kept for operational and security needs under the relevant provider’s retention arrangements. You may ask about the retention criteria applicable to your information.
08 / Cookies and similar technologies
The website’s own code does not set analytics or advertising cookies, use tracking pixels, or embed third-party video players. The client carousel, project navigation and animation state run in memory rather than persistent tracking storage.
Your browser may cache photographs, scripts and fonts to load pages more efficiently. Hosting and network providers may use technologies strictly necessary for delivery or security. Those are distinct from optional marketing tracking.
If we introduce optional analytics, advertising cookies or similar technologies, we will update this notice and obtain consent where required before using them. Your browser provides controls for cookies and site data. External websites and your email application have their own privacy arrangements.
09 / Your rights
Subject to the relevant legal conditions and exemptions, you may request access, correction, erasure or restriction of your personal information, object to processing, and request portability where it applies. You have an unconditional right to object to direct marketing. You may withdraw consent where we rely on it.
Email info@upperstudio.com. We may need proportionate information to verify your identity. Requests are normally answered within one month, although the law allows extensions in some circumstances. These rights are not all absolute.
You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not have to contact us first, although we welcome the opportunity to resolve concerns.
10 / Security and updates
We use measures appropriate to the information and risks involved. No internet transmission or storage system can be guaranteed completely secure. Our contact form uses FormSubmit to process your email address and message and forward them to info@upperstudio.com. FormSubmit states that submissions are retained for 30 days. This contact form does not accept attachments. Please use an agreed secure transfer method for confidential files or large image sets.
We may update this notice to reflect changes in the website, our processing or applicable law. The date at the top identifies this version. Material changes will be communicated where required.
Display preference
If you choose light or dark mode, we store that display preference in your browser’s local storage. It stays on your device and is not used for tracking or advertising. You can remove it by clearing this site’s browser data.