Privacy policy
What we collect, why we use it, who helps us provide the service, and the choices you have.
Updated 26 September 2026On this page
Who this notice covers
This notice explains how Qentrah Studio handles personal information through this website, customer accounts, purchase enquiries, orders, and support. It also covers information you send us directly about a project.
For a project in which we process information on a client’s behalf, the project agreement and any applicable data-processing terms also apply. External websites and payment-provider pages have their own privacy notices.
Information you provide
Contact and project enquiries may include your name, email address, phone number, company information, project requirements, and the messages or attachments you choose to send.
A customer account includes your account details, authentication records, and an optional profile image. Orders and service offers include the agreed scope, price, currency, customer details, payment status, and delivery or renewal records.
Please provide only information needed for your enquiry or order. Do not send passwords, complete card details, or sensitive personal documents through ordinary contact messages.
Technical information and browser storage
Our hosting and security systems may process request information, such as IP addresses, browser information, timestamps, and error records, to deliver the website, diagnose failures, and prevent misuse. The checkout may use an approximate country code to suggest an available currency; this is not precise device-location access.
The website stores language, basket, and account-session information in your browser. Temporary password-recovery information is also stored during the recovery process. You can clear site data in your browser, but doing so may sign you out or clear your basket.
We use Vercel Web Analytics for aggregated visit statistics. Its analytics service does not use analytics cookies. See the cookies and browser storage page for more detail and a link to Vercel’s explanation.
Why we use information
We use relevant information to answer enquiries, prepare offers, administer accounts, verify access, process and reconcile orders, deliver purchased work, provide support, and communicate about your existing services.
We also use records where necessary for security, accounting, legal obligations, and resolving disputes. Where applicable law requires a legal basis, the basis depends on the purpose: taking steps you request before a contract, performing a contract, complying with a legal obligation, a permitted legitimate interest, or consent where required. Consent can be withdrawn for the processing that relies on it.
Payment information
Checkout is completed on the payment provider’s page. The current checkout integration uses XPay. We retain order and transaction references, amounts, currencies, and payment or refund status to manage your purchase; Qentrah’s checkout does not ask you to send full card numbers or card security codes to the studio.
The provider handles the payment details you enter on its own pages under its applicable terms and privacy notice. Never include complete card details in a refund or support request.
How long information is kept
Retention depends on the type of record and why it is needed. Enquiry and support records relate to the enquiry or service; account records relate to account operation; and order, payment, and project records may need to remain available for accounting, disputes, or legal requirements after a service ends.
Closing an account does not necessarily erase every order or financial record. If you request deletion, we will assess which records can be removed and explain any applicable reason for retaining others. Backup copies may remain until the relevant backup cycle completes. Contact us if you need details about a particular record.
Security and processing locations
Account authentication and access controls restrict access to customer records and purchased files. No internet service can promise absolute security. If you believe your account or information has been compromised, contact us without sending your password.
Service providers may process information in countries different from yours. Applicable transfer requirements depend on the information, provider, and law involved. You can ask us for information about the providers and safeguards relevant to your use of the service.
Your choices and privacy requests
Depending on applicable law, you may have rights to access or obtain a copy of your personal information, correct it, request deletion, restrict or object to processing, or receive certain information in a portable format. These rights can have conditions and exceptions. You may also have the right to complain to the relevant data-protection authority.
Send a request using the contact address below and explain what you need. We may ask for proportionate information to verify your identity before disclosing or changing records. We will address requests within the period required by applicable law and explain any lawful restriction; making a request does not automatically delete the account.
Children, questions, and notice changes
The site’s purchasing and account services are intended for people able to enter a binding contract, or to act with appropriate authority. If you believe a child has submitted personal information without the necessary authorisation, contact us so we can review it.
We may update this notice when the service or its information practices change. The update date identifies this version. Where a change requires additional notice or consent under applicable law, posting an updated page does not replace that requirement.