Privacy policy
Last updated 21 September 2026
This policy explains what personal data A-Bridge Studios collects when you use abridgestudios.co.uk, create an account or book a session, why we collect it, who we share it with, and your rights. We keep it as plain as we can.
Who we are
| Data controller | A-Bridge Group Limited, trading as A-Bridge Studios |
|---|---|
| Studio address | 255 Broadway, Bexleyheath DA6 8NP |
| Registered office | 255 Broadway, MCC Building, Bexleyheath DA6 8ET |
| Company number | 15655759 |
| Contact | info@abridgestudios.co.uk |
For privacy questions or to use any of your rights, email us at the address above.
What we collect
If you make an account or book
- Account details: your name, email address, optional phone number and a password (stored only as a one-way hash, never in readable form).
- Booking details: the space and time you book, number of guests, what you plan to use the space for, any specialist you choose, prices, payment and refund status, and reminders we send.
- Packages and Studio Credit: what you have bought, hours used and your credit balance and history.
- Marketing choice: whether you have agreed to receive marketing from us. This is off unless you opt in.
- Notifications: messages shown in your account and, if you turn them on in your browser, push notifications.
If you join as a specialist (staff)
- Your profile: bio, photos, contact email and phone, social and portfolio links, genres, skills, rates and availability.
- Your payout status and a Stripe Connect account reference. Your identity and bank details are collected and held by Stripe, not by us.
- Records of bookings assigned to you and the earnings owed to you.
Automatically
- Our servers record technical data such as your IP address, browser type and the pages requested, for security, fraud prevention and fixing faults.
- A login session cookie if you sign in (see Cookies).
We do not see or store your full card number. Card details are entered on Stripe’s secure pages and go directly to Stripe.
Why we use it, and our legal basis
| Running your account and bookings, taking payment, sending confirmations and reminders | Contract — we need this to provide what you booked. |
|---|---|
| Paying specialists for their work | Contract and legitimate interests. |
| Keeping accounts, tax and refund records | Legal obligation. |
| Security, preventing fraud and abuse, keeping the service working | Legitimate interests. |
| Marketing emails | Your consent, which you can withdraw at any time. |
| Push notifications | Your consent, given through your browser. |
| Asking for a Google review after a completed session | Legitimate interests. You can ignore it, and you can ask us not to send it. |
Who we share it with
We do not sell your data. We share it only with providers that help us run the service, and only what they need:
- Stripe — payments, refunds, subscriptions and staff payouts (Stripe Connect). Stripe is an independent controller of the data it needs for fraud prevention and legal compliance; see stripe.com/gb/privacy.
- Email delivery — MXroute, which sends our booking and account emails and hosts our mailbox.
- Our hosting provider — which runs the server and database that hold your account.
- Cloudflare Turnstile — spam protection on forms, where enabled.
- Google Fonts — our pages load fonts from Google, which means your IP address is sent to Google when a page loads.
- The specialist you book — they see your name, the booking details and any contact details needed to deliver the session.
- Professional advisers and authorities — such as accountants, insurers or law enforcement, where the law requires it or to protect our rights.
Some staff profiles link to or embed music and video from Spotify, YouTube or Apple Music. These load only when you choose to play them, and those services then handle your data under their own policies.
Some of these providers (for example Stripe and Google) may process data outside the UK. Where they do, they rely on lawful safeguards such as the UK adequacy regulations or the UK International Data Transfer Addendum.
How long we keep it
- Account and profile data: while your account is open, and deleted or anonymised after you ask us to close it, apart from what we must keep by law.
- Booking, payment and refund records: at least 6 years, for tax and accounting.
- Login sessions: until they expire or you log out.
- Server logs: kept for a limited period for security and then removed.
Cookies and similar technology
We use a single strictly necessary cookie to keep you signed in. It is secure, HttpOnly and only used for your login session, so it does not need consent. We do not currently use analytics or advertising cookies. If that changes we will update this page and ask for your consent first.
If you enable push notifications, your browser stores a service worker and a subscription so we can send them. You can turn this off at any time in your browser settings.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong or incomplete;
- delete your data, where we no longer need it;
- restrict or object to how we use it;
- give you your data in a portable format; and
- withdraw consent at any time (for example, unsubscribe from marketing).
Email info@abridgestudios.co.uk and we will reply within one month. You can also change most account details yourself when you are signed in.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Security
Traffic to our site is encrypted, passwords are hashed, and access to customer records is limited by role. No online service is perfectly secure, so please use a strong, unique password.
Changes to this policy
If we change how we use your data we will update this page and the date at the top, and tell you directly if the change is significant.
See also our Terms of hire.