Last updated: 25 August 2026

Cinderella's Studio ("we," "us," "our") respects your privacy. This policy explains what information we collect when you visit this website or work with us, why we collect it, and what rights you have over it.

By using this site or submitting a form to us, you agree to the practices described below.

 1. Who We Are

Cinderella's Studio is a branding and strategy studio operated by Cinderella's Crerative Studio . For any questions about this policy or your data, contact us at [email protected].

We work with clients across the US, GCC, and EU/UK, so this policy is written to meet the requirements of applicable US state laws and the EU/UK General Data Protection Regulation (GDPR).


2. Information We Collect

**Information you give us directly:**
- Name, email, and business details submitted through our application and contact forms (via Showit and Tally)
- Information shared when booking a call (via Calendly, which syncs to Google Calendar)
- Any project details, brand materials, or business information you share with us during an application, audit, or engagement
- Payment information when you book paid services (processed by our payment provider — we do not store card details ourselves)

**Information collected automatically:**
- Standard technical data (IP address, browser type, device type, pages visited, time on site) via analytics tools
- Cookies and similar tracking technologies, including advertising pixels, used to understand site performance and run marketing campaigns


3. Cookies and Tracking

This site uses cookies and tracking technologies, including analytics and advertising pixels. Where required by law (including for visitors in the EU/UK), you will be asked to consent before non-essential cookies are activated. You can change your cookie preferences at any time using the cookie settings link in the site footer, or by adjusting your browser settings.


4. How We Use Your Information

We use the information we collect to:
- Review applications and determine fit for our services
- Schedule and manage calls and consultations
- Deliver, invoice, and support the services you've engaged us for
- Send project-related communication
- Send marketing communication, where you've opted in
- Understand how visitors use our site, so we can improve it
- Meet our legal and accounting obligations

We do not sell your personal information.


5. Legal Basis for Processing (EU/UK Visitors)

If you are located in the EU or UK, we process your data under one or more of the following bases:
- **Consent** — for marketing communications and non-essential cookies
- **Contract** — to provide services you've applied for or purchased
- **Legitimate interest** — for site analytics and business operations
- **Legal obligation** — for financial and tax record-keeping


6. Who We Share Information With


We share information only with the service providers that help us operate:
  • Showit— website hosting and form submissions
  • Tally— application and intake forms
  • Calendly / Google Calendar — scheduling
  • Stripe — payment processing
  • Kit — email communication
  • Google Analytics, Meta — site analytics and advertising

These providers only receive the information needed to perform their function and are bound by their own privacy and security obligations. We do not sell or rent your data to third parties.


7. International Data Transfers

Because we work with clients globally and use service providers based in different countries (including the US), your information may be transferred to and processed in countries outside your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect data transferred from the EU/UK.


8. Data Retention


We keep your information only as long as necessary to:
- Deliver the services you've engaged us for
- Meet legal, tax, and accounting requirements
- Maintain records of past client work for reference

Application information from prospects who do not move forward is retained for 36 months and then deleted, unless you ask us to remove it sooner.


9. Your Rights

Depending on where you're located, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time (this won't affect processing done before withdrawal)

To exercise any of these rights, contact us at [contact email]. EU/UK visitors also have the right to lodge a complaint with their local data protection authority.


10. Data Security

We take reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we work only with reputable providers who maintain their own security standards.


11. Children's Privacy


Our services are intended for business owners and professionals. We do not knowingly collect information from anyone under 18.


12. Changes to This Policy


We may update this policy as our practices or legal obligations change. The "last updated" date at the top reflects the most recent revision. Continued use of this site after changes take effect means you accept the updated policy.


13. Contact Us

If you have questions about this policy or how we handle your information, reach out at [email protected]

Privacy Policy