Last Updated: May 19, 2026

Circleo Studio (“we,” “us,” or “our”) is committed to protecting the privacy and security of the personal information we collect from our clients, website visitors, and partners. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, https://www.circleo.studio/, or engage our Squarespace web design, maintenance, and white-label services.

By using our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We may collect several types of information from and about users of our services, including:

Information you provide to us (enquiries and client onboarding): Your name, email address, phone number, company name, website URL, and any information you include in your message when you contact us, request a quote, book a call, or otherwise enquire about our services.
Client and project information: Information necessary to provide our Squarespace web design, rebuild, maintenance and white-label services—such as project requirements, brand assets, content you provide, feedback, and communications. Where required for delivery or maintenance, this may also include account access details (for example, Squarespace contributor access, domain/DNS access, email marketing tools, analytics tools, or other third-party platforms). We ask that you avoid sending passwords by email where possible and instead use secure sharing methods.
Payment and billing information: Invoices, payment status, and billing contact details. Card payment details are typically processed by secure third-party payment providers and are not stored by us.
Technical, usage and device information (website analytics): Information collected automatically when you visit our website, which may include IP address, approximate location (derived from IP), device type, browser type, operating system, pages viewed, time spent on pages, referring URLs, and interactions with our site.
Cookies and similar technologies data: Information collected via cookies, pixels and similar technologies (including those provided by Squarespace and other tools we use) to help our website function, to remember preferences, and to understand website performance and usage.
Agency/partner information (white-label): Where you engage us as a partner (or we work with another agency), we may collect and process contact details and project-related information needed to deliver white-label services under our agreements.

2. How We Collect Information (including Squarespace & contact forms)

We collect information through the following methods:

Squarespace-hosted website and forms: Our website is built and hosted on Squarespace. When you submit an enquiry via a Squarespace form, scheduling link, or embedded form on https://www.circleo.studio/, the information you enter is transmitted to us and may also be processed and stored within Squarespace’s systems in accordance with their terms and privacy practices.
Direct interaction: Information you provide by email, during calls/meetings, through messaging platforms, or when signing our service documents (including Service Agreements, Maintenance Agreements, White-Label Agreements and NDAs).
Automated technologies: As you navigate our website, we use cookies and similar tools (including those provided by Squarespace and any analytics tools we configure) to collect technical and usage data about how visitors use our site.
Third-party sources: We may receive information from third-party providers or partners (for example, where an agency engages us on a white-label basis or where integrations transmit lead details), to the extent permitted by law and our agreements.

3. How We Use Your Information

Circleo Studio uses personal data for the following purposes (as permitted by applicable law and, where required, with your consent):

To provide and manage our services: To design, rebuild and support Squarespace websites; deliver custom sections; provide SEO foundations; provide training; and perform ongoing maintenance and support.
To handle enquiries and communications: To respond to messages, provide proposals and statements of work, send project updates, request information needed for delivery, and provide administrative notices.
To operate our business: For internal record-keeping, workflow management, quality control, and improving our services and website experience.
Marketing (where permitted): To send updates, insights, or newsletters where you have opted in, or where we otherwise have a lawful basis to do so. You can opt out at any time using the unsubscribe option (where provided) or by contacting us.
Security, fraud prevention and troubleshooting: To keep our website and systems secure and to prevent misuse.
Legal and contractual obligations: To comply with applicable laws and regulations, to meet contractual obligations, and to establish, exercise, or defend legal claims.

4. Disclosure of Your Information (third-party service providers)

We do not sell your personal information. We may share personal information with third parties only as necessary for the purposes described in this Privacy Policy, including:

Squarespace: Our website is hosted on Squarespace. Squarespace may process certain personal data (including form submissions and website analytics data) to provide hosting and related services.
Service providers and subcontractors: Trusted providers who help us run our business and deliver services (for example, analytics, email services, project management, communications tools, invoicing/accounting, and payment processors). These providers process personal data on our instructions or as independent controllers (depending on the service) and are expected to apply appropriate safeguards.
White-label and delivery partners: Where we deliver services as a white-label partner, we may share relevant project information with the contracting agency and, where necessary, their client, in line with the relevant agreement and instructions.
Legal and compliance: Where required by law, court order, or regulatory request, or where disclosure is necessary to protect our rights, users, or others.

We may also share information in connection with a business transaction (such as a merger, acquisition, reorganisation, or sale of assets), subject to appropriate confidentiality safeguards.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

7. Your Rights (GDPR / UK Data Protection)

If you are in the UK or EEA, or where UK GDPR/EU GDPR otherwise applies, you have certain rights in relation to your personal data, including:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct personal data that is inaccurate or incomplete.
Right to erasure: You can ask us to delete your personal data in certain circumstances.
Right to restrict processing: You can ask us to limit how we use your personal data in certain circumstances.
Right to object: You can object to processing based on legitimate interests, and to direct marketing.
Right to data portability: You can request that we provide certain personal data to you or transfer it to another provider, where applicable.
Right to withdraw consent: Where we rely on consent, you can withdraw it at any time (this will not affect the lawfulness of processing before withdrawal).
Right to complain: You can lodge a complaint with the UK Information Commissioner’s Office (ICO) (or your local supervisory authority in the EEA). UK ICO details: https://ico.org.uk/

We may need to verify your identity before responding to a request. To exercise any of these rights, please contact us using the details in the “Contact Information” section below.

8. Third-Party Links

Our website may contain links to other websites. This Privacy Policy applies only to Circleo Studio. We are not responsible for the privacy practices or content of third-party sites. We encourage you to read the privacy policies of any linked websites you visit.

9. Cookies (Squarespace cookies, analytics & managing preferences)

Our website uses cookies and similar technologies (such as pixels and local storage) to help the website function, to improve performance, and to understand how visitors use our website. Because our site is hosted on Squarespace, some cookies are set by Squarespace by default, and additional cookies may be set by services we configure (for example, analytics or embedded content).

Cookies may include:

Strictly necessary cookies: Required for the website to operate and for security features.
Preferences/functionality cookies: Help remember choices and improve your experience.
Analytics/performance cookies: Help us understand website usage and improve our content and site structure.

Managing cookies: You can control cookies through your browser settings (including deleting existing cookies and blocking new cookies). If you disable cookies, some parts of the website may not function properly.

Where required by law, we will use a cookie banner/consent mechanism to offer choices for non-essential cookies.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this document. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Circleo Studio
Website: https://www.circleo.studio/
Email: legal@circleo.studio