Privacy Policy

Last updated: 26 July 2026

Important notice regarding text-messaging data. ES Studios does not share customer opt-in information, including phone numbers and consent records, with any affiliates or third parties for marketing or promotional purposes. All SMS originator opt-in data is kept strictly confidential and is shared only with the service providers needed to send the messages you have requested.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and services, and describes your privacy rights and how the law protects you. By using the Service, you agree to the collection and use of information in accordance with this Policy.

Who we are

The data controller is TH Technology Ltd, a company registered in England & Wales (registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom), trading as "ES Studios" ("we," "us," or "our"). Our website is ericscottstudios.com. You can contact us at thomas@ericscottstudios.com.

Definitions

  • Personal Data means any information relating to an identified or identifiable individual.
  • Service means our website and the marketing services we provide.
  • Client means a business that engages us for services. Client Customer means an individual whose data a Client provides to us or whose data is collected through the Client's website or systems we operate.
  • Service Provider / Sub-processor means a third party that processes data on our behalf to help deliver the Service.
  • Usage Data means data collected automatically through use of the Service (for example, IP address, browser type, pages visited).

Personal data we collect

Information you give us may include: name, email address, phone number, business name, postal address, and any information you submit through forms, bookings, or the estimator tool.

Usage data is collected automatically and may include your device's IP address, browser type and version, the pages you visit, time and date of visit, time spent on pages, unique device identifiers, and other diagnostic data.

Client Customer data. When we provide services to a Client, we process personal data about that Client's own customers (for example, names, phone numbers, email addresses, and review/booking activity) on the Client's behalf. For that data, the Client is the controller and we act as processor under our Data Processing Agreement.

Cookies and tracking technologies

We use cookies and similar technologies (beacons, tags, scripts) to operate the site, remember your choices, and understand how the Service is used. Cookies may be "session" (deleted when you close your browser) or "persistent." Where required by law, we set non-essential cookies (analytics, advertising, remarketing) only with your consent, which you can withdraw at any time using our cookie preferences tool or your browser settings. Withdrawing consent does not affect processing carried out before withdrawal.

Categories we use:

  • Strictly necessary: required to run the site and remember your cookie choice.
  • Analytics: to understand usage and improve the Service (for example, Google Analytics, Google Tag Manager, and Microsoft Clarity).
  • Advertising / remarketing: to measure and improve our marketing (for example, the Meta pixel).
  • Functionality: to enable features such as live chat (for example, Intercom and our chat assistant).

How we use your personal data

  • To provide, maintain, and improve the Service and monitor its usage.
  • To manage your account, requests, and our contract with you.
  • To contact you by email, phone, SMS, or push notification about the Service or, where permitted, similar services you have inquired about (you can opt out at any time).
  • For analytics, to identify usage trends and measure the effectiveness of our marketing.
  • To comply with legal obligations and to establish, exercise, or defend legal claims.
  • In connection with a business transfer (merger, acquisition, or asset sale), with notice as described below.

Legal bases (UK/EU)

Where UK-GDPR or EU-GDPR applies, we rely on: contract (to provide services you request); legitimate interests (to run and improve our business, where not overridden by your rights); consent (for non-essential cookies and certain marketing); and legal obligation (to comply with the law).

How we share your data

We share personal data only as needed to run the Service:

  • Service providers / sub-processors that host, process, or transmit data on our behalf, including our CRM and automation platform (GoHighLevel / LeadConnector), Twilio (SMS and MMS delivery), Stripe (payment processing), our website hosting and WordPress infrastructure, citation-management services, analytics and chat providers, and the publishing APIs of Google, Facebook, Instagram, and YouTube.
  • Legal and safety reasons: to comply with law, respond to lawful requests by public authorities, enforce our terms, or protect rights, property, or safety.
  • Business transfers: in connection with a merger, financing, or sale of assets; we will provide notice before your data becomes subject to a different policy.

We do not sell your personal information, and we do not share SMS opt-in data or consent records with third parties for their own marketing.

SMS / text messaging

If you opt in to text messages, message and data rates may apply and message frequency varies. Reply STOP to opt out at any time and HELP for help, or contact team@ericscottstudios.com or +1 801-876-7399. We comply with the Telephone Consumer Protection Act (TCPA) and CTIA guidelines. No mobile opt-in information is shared with third parties or affiliates for marketing; sharing with sub-processors that support the messaging service (such as our SMS provider) is limited to what is necessary to deliver the messages you requested.

Retention

We keep personal data only as long as necessary for the purposes described here and to meet legal, tax, dispute-resolution, and enforcement needs. As general maximums: account information is kept for the account relationship plus up to 24 months after closure; support and chat records up to 24 months; website analytics and server logs up to 24 months. We may keep data longer where required by law or to defend legal claims, and we delete or anonymize data when it is no longer needed.

International transfers

We are established in the United Kingdom and serve clients in the United States, so your data may be transferred to and processed in countries whose data-protection laws differ from your own. Where required, we put appropriate safeguards in place (such as standard contractual clauses or the UK Addendum, and the UK Extension to the EU-US Data Privacy Framework where applicable) so your data remains protected.

Your privacy rights

UK/EU residents. You have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

US state residents (including California under the CCPA/CPRA, and similar state laws). You have the right to know what personal information we collect and how we use and disclose it; to request access to and deletion of your personal information; to correct inaccurate information; and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by these laws. We will not discriminate against you for exercising your rights.

To exercise any right, contact thomas@ericscottstudios.com. We will verify your request and respond within the timeframes required by applicable law. You may use an authorized agent where the law allows.

Children's privacy

The Service is not directed to anyone under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will take steps to remove it.

Security

We use commercially reasonable technical and organizational measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Links to other websites

The Service may link to sites we do not operate. We are not responsible for their content or privacy practices, and we encourage you to review their policies.

Changes to this policy

We may update this Policy from time to time. We will post the new version here, update the "Last updated" date, and, where appropriate, notify you by email or a prominent notice. Changes are effective when posted.

Contact us

Questions about this Policy or your data: thomas@ericscottstudios.com · TH Technology Ltd t/a ES Studios, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.