Privacy Policy

At Maverick Frame Studio we take the protection of your personal data seriously. This Privacy Policy explains what data we collect, for what purpose, on what legal basis we process it and what rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR and other applicable data protection law.

Data controller

• Owner: Concept Vibe Ltd (trading as Maverick Frame Studio), registered in England and Wales, company no. 14547578
• Phone: +44 7418 352427
• Registered office: 85 Great Portland Street, London, England, W1W 7LT
• Contact email: sale@maverickframe.com

Definitions

• Service. The service described on this website.
• Personal Data. Any information relating to an identified or identifiable natural person.
• Usage Data. Data collected automatically from the use of the Service or its infrastructure (for example, the duration of a visit).
• Cookies. Small files stored on your device.
• Data Controller. The party that determines the purposes and means of processing. For this policy, we are the controller of your personal data.
• Data Processor. A third party that processes data on the controller’s behalf.
• Data Subject (User). The natural person to whom the personal data relates.

Data we collect

We collect different types of data in order to provide and improve our Service. We do not collect special-category data (health, beliefs, religion, etc.) or payment-card data through this website, as we do not process online payments.

Personal Data

When you use our Service we may ask you for certain identifying details, which may include, among others:

• Email address
• First and last name
• Phone number
• Address, city, province, postal code
• Cookies and usage data

We may use your data to send you newsletters or commercial information that may be of interest to you. You can opt out of these communications at any time via the unsubscribe link in each email or by contacting us.

Usage Data

We may also collect information on how the Service is accessed and used, such as your IP address, browser type and version, the pages you visit, the date and time of your visit, time spent, device identifiers and other diagnostic data.

Cookies and tracking technologies

We use cookies and similar technologies to analyse and improve the Service. You can set your browser to refuse all cookies or to warn you when one is sent; if you do not accept them, some parts of the Service may not work properly. For more detail, see our Cookie Policy.

By purpose, we group cookies into these categories:

• Strictly necessary. Essential for the operation and security of the site (including Cloudflare network cookies).
• Analytics. From Google Analytics (the _ga family), to measure site usage in aggregate.
• Advertising. From Google Ads (the _gcl family), to measure campaign performance.
• Marketing and CRM. From HubSpot (hubspotutk), to recognise the visitor on forms and attribute the contact.

Analytics, advertising and marketing cookies are only set with your consent. When you enter the site, our cookie banner lets you accept, reject or configure them by category, and you can change or withdraw your choice at any time from the banner itself or from your browser settings.

Purposes of processing

• Provide and maintain the Service
• Notify you about changes to the Service
• Handle your requests and provide support
• Analyse usage to improve the Service
• Detect, prevent and resolve technical issues
• Send you communications about similar services, unless you object

Legal basis for processing (GDPR)

We process your personal data on one or more of the following legal bases, depending on the context:

• Performance of a contract or pre-contractual steps at your request.
• Your consent, which you can withdraw at any time.
• Legitimate interest, where not overridden by your rights and freedoms.
• Compliance with legal obligations.

Data retention

We keep your personal data only for as long as necessary for the purposes described in this policy and to comply with our legal obligations, resolve disputes and enforce our agreements. Usage data is generally kept for a shorter period, unless used to strengthen security or improve the Service, or where the law requires longer retention.

Recipients and providers (data processors)

We do not sell or rent your personal data. We only share it with providers that process it on our behalf, under a data-processing agreement pursuant to Art. 28 GDPR, and only for the purposes described. The main ones are:

Provider	Purpose	Data processed	Safeguards
Google — Analytics, Tag Manager and Ads (Google Ireland Ltd. / Google LLC)	Usage analytics and advertising measurement	Usage data, cookie identifiers and IP	Transfer to the US under standard contractual clauses
HubSpot, Inc.	Contact forms, CRM and lead attribution	Name, email, phone, message and cookie identifier	Transfer to the US under standard contractual clauses
Bunny.net (BunnyWay d.o.o.)	Video hosting and playback	Technical connection data and IP when a video is played	Provider based in the EU (Slovenia)
Rocket.net and Cloudflare	Web hosting, CDN and security	Technical connection data, IP and server logs	Standard contractual clauses for international transfers

This list may be updated if we change providers. You can review each provider’s privacy policy on its website.

International transfers

Some providers may process data outside the European Economic Area. In such cases we ensure the appropriate safeguards required by the GDPR (such as adequacy decisions or the European Commission’s standard contractual clauses).

Your rights

As a data subject, you have the right to:

• Access your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”).
• Restriction of processing.
• Objection to processing.
• Portability of your data.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

You can exercise these rights by writing to sale@maverickframe.com, proving your identity. If you believe the processing does not comply with the law, you have the right to lodge a complaint with the competent supervisory authority (in the UK, the Information Commissioner’s Office, ICO; and, if you are in the EEA, your local data protection authority).

Data security

We apply reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee its absolute security.

Changes to this Privacy Policy

We may update this policy from time to time. We will post any changes on this page and indicate the date of the last update at the top.

Contact

If you have any questions about this Privacy Policy or how we process your data, write to us at sale@maverickframe.com.