top of page

Privacy Policy

Last Updated: 30-10-2026

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, in compliance with the EU General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018 (UK GDPR), and other applicable data protection laws.

1. Who We Are (Data Controller)

The Data Controller responsible for your personal data under this policy is:

  • Company Name: A Pinch Of Space (APOS) Studio

  • Address: 124 City Road, London, EC1V 2NX, United Kingdom

  • Email Contact: experience@apos.studio

2. Information We Collect

We collect and process personal data only when we have a lawful basis to do so. This includes:

  • Information you provide directly: When you fill out a contact form, subscribe to a newsletter, or create an account, we may collect your name, email address, phone number, and company name.

  • Information collected automatically: When you browse our website, we automatically collect certain technical details via cookies and tracking technologies. This includes your IP address, browser type, operating system, referring URLs, and details about your behaviour on our site (e.g., pages viewed, time spent).

3. How We Collect Your Data (Wix Platform)

Our website is hosted on the Wix.com platform. Wix provides us with the online platform that allows us to sell our services to you. Your data may be stored through Wix.com’s data storage, databases, and the general Wix.com applications. They store your data on secure servers behind a firewall.

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

4. Lawful Basis for Processing

Under the GDPR, we rely on the following legal bases to process your personal data:

  • Your Consent: For non-essential cookies, email marketing, and newsletters (which you can withdraw at any time).

  • Performance of a Contract: To deliver services, or handle customer support requests.

  • Legitimate Interests: To improve our website performance, protect our site against fraud, and maintain security.

  • Compliance with Legal Obligations: To meet tax, accounting, or regulatory requirements.

5. Cookies and Tracking Technologies

We use cookies to ensure our website functions correctly, to analyze traffic, and for marketing purposes. We use Usercentrics as our Consent Management Platform. Cookies are categorized as:

  • Essential Cookies: Necessary for security, system administration, and basic site functionality. These cannot be turned off.

  • Analytics/Performance Cookies: Help us understand how visitors interact with our site so we can improve it.

  • Marketing/Targeting Cookies: Used to track visitors across websites to deliver relevant advertisements.

You can manage, adjust, or withdraw your cookie preferences at any time by clicking the cookie settings widget icon available on our website.

6. How Long We Keep Your Data

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When it is no longer required, your data will be securely deleted or anonymized.

7. Third-Party Service Providers

We may share your data with trusted third-party service providers to help us operate our website and business (e.g., payment processors, analytics tools like Google Analytics, or email marketing platforms). These third parties are contractually obligated to protect your data and process it strictly according to our instructions.

8. International Data Transfers

Because our website is hosted by Wix, your personal data may be transferred to, stored, and processed in countries outside the European Economic Area (EEA) and the United Kingdom, including the United States. Wix ensures an adequate level of data protection by utilizing Standard Contractual Clauses (SCCs) approved by the European Commission and relevant UK authorities.

9. Your Legal Rights (UK & EU)

If you are located within the UK or EU, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data under certain conditions.

  • Right to Restrict or Object to Processing: You can object to us processing your data for direct marketing or request that we limit how we use it.

  • Right to Data Portability: You can request that we transfer your data to another organization or directly to you in a structured format.

  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

​

To exercise any of these rights, please contact us at experience@apos.studio.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) (www.ico.org.uk). In the EU, you can contact your local Data Protection Authority.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "Last Updated" date at the top of this page will change accordingly.

bottom of page