legal
privacy policy
Who we are, what we collect through chroma.london, and what you can ask us to do with it.
last updated 3 november 2026
contents
01
who we are
Chroma Studios Ltd, a company registered in England, runs chroma.london and is the controller of the personal data described here. Write to gdpr@chroma.london about anything on this page.
02
what we collect
Enquiries. When you use the contact form: your name, email address and message, plus your company, budget and timeline if you give them.
Updates. Your name and email address go on our occasional updates list, unless you tick “Don’t send me Chroma’s occasional updates” on the form.
Analytics. Only if you choose “Accept all”: the pages you visit, how you reached the site, your type of device and your approximate location, through Google Analytics and Google Ads. The cookie policy has the detail.
Security. Your IP address, used briefly to stop spam and abuse of the form.
Email. Anything you send us directly.
03
why, and on what basis
Replying to your enquiry, and any work that follows: our legitimate interests, or steps towards a contract you have asked about.
Occasional updates (new work and studio news): our legitimate interests, under the soft opt-in rules in PECR, as you contacted us about our services. You can opt out on the form, and every email has an unsubscribe link.
Analytics and ad measurement: your consent, which you can withdraw at any time.
Spam and abuse protection: our legitimate interests.
We don’t sell personal data, and we don’t make automated decisions about you.
04
who handles it for us
Cloudflare runs the contact form, checks it isn’t a bot, limits repeat sends and delivers your enquiry to us.
Loops keeps our contact list, sends the acknowledgement email and the occasional updates.
Google provides Analytics and Ads measurement, only with your consent.
Framer hosts the website.
Mux streams the videos.
Each works on our instructions. Some store or handle data outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations or the UK’s standard data transfer agreements.
05
how long we keep it
Enquiries: 24 months from our last contact, unless we go on to work together. Then for as long as the work and our legal records need.
Updates list: until you unsubscribe.
Analytics: 14 months.
IP addresses for spam protection: up to 25 hours.
06
your rights
Under UK GDPR you can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, or take a copy with you. Write to gdpr@chroma.london and we will reply within a month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
07
changes
We will update this page when what we do changes, and change the date at the top.