Privacy Policy

Who we are

Rybeco Studio Co is a trading name of Rybeco Ltd (referred to in this policy as “Rybeco Studio Co”, “we”, “us” or “our”). Rybeco Ltd is the controller responsible for the personal information described in this policy.

Website: www.rybecostudio.co.uk

Email: rybeco@yahoo.com

​

This policy explains how we collect, use, share, retain and protect personal information when you visit our website, contact us, sign up for marketing, create an account, submit a review or place an order.

​

Personal information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as your name, billing and delivery addresses, email address and telephone number.

• Order and transaction information, such as the products purchased, order value, payment status, refunds, delivery method and order history.

• Personalisation information, such as names, dates, messages, themes, photographs, artwork, signatures or other files you ask us to use on a product.

• Account and preference information, such as login details, saved choices, newsletter preferences and cookie choices.

• Communications, such as enquiries, design approvals, complaints, customer-service messages and feedback.

• Reviews and social content that you choose to submit, including a display name, review, photograph or social-media interaction.

• Technical and usage information, such as IP address, device and browser information, security logs, pages viewed, referral source and cookie or similar-technology identifiers.

We do not normally need special-category information (such as health information, biometric data, political opinions or religious beliefs). Please do not include this type of information in a personalisation request unless it is genuinely necessary and you have contacted us first.

​

Personalisation files and information about other people

If you give us a name, photograph, signature, message or other information relating to another person, you confirm that you are allowed to provide it and to ask us to use it for the order. We use personalisation content to create, check, fulfil and support your order. We do not use customer-supplied photographs or personal messages for advertising without separate permission.

​

How we collect information

We collect personal information:

• Directly from you when you browse, place an order, complete a Wix Form, create an account, upload personalisation content, contact us, submit a review or join our mailing list.

• Automatically through essential website technology and, where you consent, through analytics, social-media integrations and other non-essential cookies or similar technologies.

• From service providers involved in your transaction, such as Wix, payment providers and delivery companies, for example when they confirm a payment or delivery status.

• From social-media platforms when you interact with our profile or embedded content, subject to your settings and the platform’s privacy policy.

 

Why we use personal information and our lawful bases

The table below links each purpose to the categories of information involved and the lawful basis we normally rely on. A particular activity may rely on more than one basis where the circumstances require it.

Purpose

Information used

Lawful basis

Process, personalise, fulfil and deliver orders; provide design proofs; handle returns and refunds.

Identity/contact, order, transaction, communications and personalisation information.

Contract; steps requested before entering a contract.

Answer enquiries, prepare quotes and provide customer support.

Identity/contact, communications and relevant personalisation information.

Steps requested before a contract; legitimate interests in customer service.

Take payments, prevent fraud, secure the website and protect customers and our business.

Identity/contact, transaction, technical/usage and security information.

Contract; legal obligation; legitimate interests in security and fraud prevention.

Maintain accounts, tax and order records; manage complaints, disputes and legal claims.

Identity/contact, order, transaction and communications information.

Legal obligation; legitimate interests in establishing or defending legal rights.

Send newsletters, product launches, seasonal offers and discount information.

Name, email address and marketing preferences.

Consent and compliance with PECR. You may withdraw consent at any time.

Operate and improve the website, understand usage and measure marketing performance.

Technical/usage, cookie, device and preference information.

Strict necessity or legitimate interests for essential functions; consent for non-essential technologies.

Publish genuine reviews, customer photographs or social content that you choose to submit.

Display name, review, photograph, social interaction and related order information.

Legitimate interests in customer feedback; consent where required, particularly for promotional photographs.

​

Payments

Payments are processed by the payment method you select at checkout, which may include Wix Payments, PayPal or another provider shown on the website. The payment provider receives the payment information needed to process the transaction and applies its own privacy notice. We normally receive confirmation, transaction identifiers, payment status and limited payment-method details, rather than your full card number or security code.

​

Who we share personal information with

We may share only the information reasonably needed with:

• Wix.com and relevant Wix group companies, which provide our website hosting, Wix Stores, Wix Forms, customer-management, security, analytics and related services.

• Payment providers, such as Wix Payments and PayPal, to process payments, refunds, fraud checks and disputes.

• Delivery and fulfilment providers, such as Royal Mail or another courier displayed or selected for your order.

• Email, analytics, review, social-media and application providers that we choose to enable, subject to the applicable consent and privacy settings.

• Professional advisers and service providers, such as accountants, insurers, legal advisers and IT-support providers, where they need the information to provide their services.

• Regulators, courts, law-enforcement bodies, tax authorities or other public bodies where disclosure is required or permitted by law.

• A purchaser, investor or successor if our business or assets are reorganised, sold or transferred, subject to appropriate confidentiality and legal protections.

We do not sell your personal information.

​

International transfers

Wix and some other technology providers may store or make personal information accessible outside the United Kingdom. Where a restricted international transfer occurs, we require it to be covered by a lawful transfer mechanism, such as UK adequacy regulations or appropriate safeguards. Appropriate safeguards may include the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another mechanism permitted by UK data-protection law. You may contact us for further information about safeguards relevant to your information.

​

Cookies and similar technologies

Our website uses essential cookies and similar technologies to provide features such as security, shopping baskets, checkout and remembering privacy choices. These technologies may operate without consent where they are strictly necessary.

Analytics, advertising, embedded social-media and other non-essential technologies will be used only after the consent required by law has been obtained. You can accept, reject or change non-essential choices through the cookie banner or privacy settings on the website. Withdrawing consent does not affect processing that took place before withdrawal. Third-party content, including an Instagram feed, may involve Meta or another platform receiving technical information when the content is enabled or used.

​

Marketing

We send marketing emails only where you have actively asked to receive them or another lawful PECR route clearly applies. Newsletter consent is optional and is not a condition of purchase. You can unsubscribe at any time by using the link in a marketing email or contacting us. We may retain a minimal suppression record so that we can respect your opt-out.

​

How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements. We use the following periods or criteria as a guide:

• Completed-order, payment and accounting records are normally retained for up to six years after the end of the relevant financial year, or longer where the law or an active dispute requires it.

• Personalisation files and design proofs are kept only as long as reasonably necessary to make, deliver and support the order, deal with a complaint or enable an agreed reorder, and are then deleted or anonymised.

• General enquiries are normally retained for up to 12 months after the last meaningful contact unless they lead to an order or need to be kept for a dispute.

• Marketing information is kept until you unsubscribe, withdraw consent or we decide the information is no longer current. A minimal suppression record may be kept after opt-out.

• Customer-account information is kept while the account is active and reviewed when an account has been inactive for a reasonable period or deletion is requested.

• Cookie and analytics information is retained according to the period shown in our cookie controls and the settings of the relevant provider.

 

Security

We use appropriate organisational and technical measures designed to protect personal information against accidental or unlawful loss, alteration, unauthorised access, disclosure or use. Measures may include controlled account access, strong authentication, secure website and payment services, minimising access to order information and reviewing the service providers we use. No internet or storage system can be guaranteed completely secure, but we will act promptly if we become aware of a personal-data incident.

​

Your data-protection rights

• Depending on the circumstances and lawful basis, you may have the right to:

• Ask for access to the personal information we hold about you.

• Ask us to correct inaccurate or incomplete information.

• Ask us to erase information where there is no lawful reason to keep it.

• Ask us to restrict how information is used in certain circumstances.

• Receive certain information in a portable format where the right to data portability applies.

• Object to processing based on legitimate interests in certain circumstances.

• Object to direct marketing at any time.

• Withdraw consent at any time where we rely on consent, without affecting earlier lawful processing.

• Complain to the Information Commissioner’s Office.

 

These rights are not absolute and may not apply in every case. To exercise a right, contact us using the details above. We may need to request information to confirm your identity. We will respond within the period required by law.

​

Your right to object to direct marketing: You can ask us to stop using your personal information for direct marketing at any time. We will honour that request.

​

Automated decision-making

We do not ourselves use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects. Payment providers may use automated fraud and security checks under their own privacy notices.

​

Children

Our website is not directed at children under 13 and we do not knowingly collect personal information directly from them. An adult ordering a personalised product that contains a child’s name or photograph must have the authority to provide that information. If you believe a child has submitted information to us without appropriate permission, please contact us.

​

Third-party websites and social media

Our website may contain links to or content from third-party websites, payment services and social-media platforms. Those organisations control their own processing and privacy practices. We encourage you to read their privacy information before providing personal information or using their services.

​

Changes to this policy

We may update this policy when our website, services, providers or legal obligations change. The current version will be posted on this page with a revised “last updated” date. If a change materially affects how we use information already collected, we will take reasonable steps to bring it to your attention.

​

Contact and complaints

Please contact us first if you have a question, request or complaint about this policy or our use of personal information:Email: rybeco@yahoo.com

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. Information about making a complaint is available at https://ico.org.uk/make-a-complaint/ or by calling 0303 123 1113.