Last updated 11 November 2026

Privacy notice

This notice explains what we do with your personal data when you visit this website, join the waitlist, or create an account and use Ross Artefact Studio. We keep it short and only collect what we need.

Who we are

Ross Artefact Studio is run by Will Ross, trading as Ross. Will is the data controller, which means he decides how your data is used and is responsible for looking after it. You can reach us at willmross6@gmail.com.

What we collect

When you create an account: your email address and password. Your password is stored scrambled (hashed), so nobody, including us, can read it. We also record when you agreed to the beta terms, and when you last logged in.

When you use the studio: the projects you make (designs, measurements, colourways, notes), your brand settings and logo, artwork you upload, and any designs you share for review together with the comments on them.

When you join the waitlist: your name and email address, and anything else you choose to add: your label or brand name, your role, what you want from us, and your note. We also record whether you ticked the box to get email updates, and when you signed up.

When you visit: like every website, our host records technical details such as your IP address, browser type and the pages requested, to keep the site running and secure. We don’t use these to identify you.

Please don’t put sensitive information (such as health details) in the note box.

Why we use it, and our legal basis

What we doLegal basis
Reply to your sign-up, add you to the waitlist and answer questions you ask usLegitimate interests: you asked us to get in touch, and we need your details to do that
Send you email updates about the beta, new features and launchYour consent, given by ticking the box. Only if you ticked it
Understand who the studio is for, so we build the right thingsLegitimate interests: improving our product, using only what you chose to tell us
Provide your account and the studio: log you in, save your projects and artwork, and share designs you choose to shareContract: it’s the service you signed up for
Keep the website secure and workingLegitimate interests: running a safe website

You don’t have to give us any details. Without an account you can still use the studio, and your projects are then kept only in your own browser.

We don’t sell your data, we don’t use it for advertising, and we don’t make automated decisions about you.

Who sees your data

Only the Artefact Studio team. We use a few service providers who handle data on our behalf, under contracts that only let them use it to provide their service to us:

We’d only share your data with anyone else if the law required it.

If you share a design for review, anyone you give the review code to (and who has an account) can see that design and add comments. Artwork you upload is stored at a long, random web address that can’t be guessed, so it’s only seen by people you share a design with.

Transfers outside the UK and EU

Netlify, Supabase and Google are based in the United States, and our Supabase database is in Singapore. When your data goes outside the UK and EU, it’s protected by the EU–U.S. Data Privacy Framework and its UK Extension, or by standard contractual clauses (with the UK addendum) in our providers’ data processing agreements. These are the safeguards UK and EU law require.

How long we keep it

Your account and projects: for as long as you have an account. You can delete your account at any time from the Account menu in the studio. That deletes your account, projects and uploaded artwork straight away. Designs you shared for review are deleted with them. If an account isn’t used for two years, we’ll email you and then delete it.

Waitlist sign-ups: we keep these until the beta ends and for up to 12 months after, so we can tell you about the launch. Then we delete them. If you ask us to delete them sooner, we will. If you withdraw consent for emails, we stop emailing you straight away and keep only what we need to make sure we don’t email you again.

Our host keeps technical logs for a short time only, as set out in Netlify’s own privacy policy.

Your rights

Under UK and EU data protection law you can:

To do any of these, email willmross6@gmail.com. It’s free, and we’ll reply within one month.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.

Cookies

This website doesn’t use cookies for advertising, analytics or tracking. When you log in to the studio, your browser stores a log-in token so you stay logged in, and the studio keeps your settings and a copy of your projects in your browser’s local storage. These are strictly necessary for the studio to work, so the law doesn’t require consent for them. Logging out removes them. If we ever add analytics, we’ll update this notice and ask for your consent first.

Age

Accounts and sign-ups are for people aged 16 and over. If you’re under 16, please don’t sign up. If we learn we’ve collected details from someone under 16, we’ll delete them.

Changes to this notice

If we change how we use your data, we’ll update this page and the date at the top. If the change is significant, we’ll email people on the waitlist.

Back to the home page