Privacy & Confidentiality

1. Who we are

Katie Ko Studio ("Katie Ko", "we", "us") is a London-based couture and fine art studio. This policy explains how we collect, use and protect your personal data when you visit www.katieko.studio, join our waitlist or print club, buy from us, commission couture, or contact us.

We are the data controller for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  • Legal name: Katie Ko Ltd

  • Company number: 15407696

  • Address: Unit 6, 1A Vine Court, E1 1JH

  • Email: info@katieko.studio

We have not appointed a Data Protection Officer, as we are not required to. Any privacy question can go to info@katieko.studio.

2. The personal data we collect

We collect only what we need to make, sell and deliver our work, and to keep in touch with people who ask us to.

  • Waitlist and newsletter subscribers: your email address, your name if you give it, the date you signed up, and which of our emails you open or click.

  • Print club members and shop customers: your name, email, billing and delivery address, phone number if given, order and subscription history, membership tier and founder's number.

  • Gift buyers and recipients: the buyer's details as above, plus the recipient's name, delivery address and any gift message.

  • Couture clients: your name and contact details, event and wear date, body measurements, fitting photos and notes, design preferences, and any personal story details you choose to share for your piece, such as names, dates or motifs.

  • Anyone who contacts us: your name, email, phone number if given, and the content of your message.

  • Website visitors: IP address, device and browser type, pages viewed, the site you came from, and cookie data (see section 4).

Payment details. Card payments are handled by our payment providers (such as Stripe or PayPal). We do not see or store your full card number.

Sensitive information. We do not ask for health, religious or other special category data. If you share it to shape your commission (for example, a fit need or a ceremonial requirement), we use it only for that purpose and with your explicit consent.

Children. Our services are not aimed at under-18s. A couture commission for a minor is arranged with their parent or guardian.

3. How we use your data and why we're allowed to

UK GDPR requires a lawful basis for each use. Ours are set out below.

  • To fulfil our contract with you. We use your data to take orders, bill print club subscriptions, pack and ship boxes, design, make and fit your couture piece, handle customer service such as pauses, tier changes and replacements, and provide founding member benefits like votes and private event invitations.

  • With your consent. We send waitlist emails, early-access invitations, newsletters and news of collections, events and print releases. Existing customers may also receive emails about similar products under the soft opt-in rule. We set analytics and other non-essential cookies, and use fitting or event photos of you in our portfolio, press or social media, only after asking you first.

  • For our legitimate interests. We deliver gift memberships to the people they were bought for, and we run, secure and improve our website.

  • To meet a legal obligation. We keep accounting and tax records as UK law requires.

Every marketing email has an unsubscribe link. We do not sell your data or use it for automated decisions that affect you.

4. Cookies and analytics

Our website runs on Squarespace, which sets cookies. We use a cookie banner so you can accept or reject non-essential cookies.

  • Strictly necessary cookies keep the site, your cart and checkout working. They do not need consent.

  • Analytics cookies (Squarespace Analytics) tell us which pages are visited, so we can improve the site. They are set only if you accept.

  • Marketing cookies (for example, a Meta or Instagram pixel, if we use one) are set only if you accept.

You can change your choice at any time through the cookie banner link in the website footer, or by clearing cookies in your browser. Squarespace's own cookie policy lists each cookie it sets.

5. Who we share your data with

We share personal data only with trusted providers who help us run the studio, under contracts that require them to protect it.

  • Squarespace hosts our website, shop, subscriptions, email campaigns, forms and analytics.

  • Stripe and PayPal process payments.

  • Royal Mail delivers print club envelopes and boxes.

  • Our email provider [e.g. Google Workspace — to confirm] runs our studio email.

  • Our accountant [to confirm] handles bookkeeping and tax returns.

  • Our atelier team and trusted makers — pattern cutters, seamstresses and embroiderers — receive your measurements and design details so they can make your piece.

We may also disclose data where the law requires it, or to protect our rights in a legal claim.

International transfers. Some providers, including Squarespace and Stripe, process data in the United States. Where data leaves the UK, we rely on UK adequacy regulations (including the UK-US Data Bridge) or the ICO's International Data Transfer Agreement or Addendum to keep it protected.

6. How long we keep your data

  • Order, payment and subscription records are kept for 6 years after the end of the tax year, as UK tax law requires.

  • Couture client files (measurements, fittings and design notes) are kept for 6 years after your last commission, so we can make alterations or future pieces. You can ask us to delete them sooner.

  • Waitlist and newsletter details are kept until you unsubscribe, or for 2 years if you stop engaging with our emails.

  • Enquiries that don't lead to an order are kept for 2 years.

  • Photos used with your consent are kept until you withdraw consent. Posts already published may take a little time to remove.

7. How we keep it secure

We use providers with strong security, restrict access to people who need it, and keep paper measurement records in the studio securely. If a breach puts your rights at risk, we will tell you and the ICO as the law requires.

8. Your rights

Under UK GDPR you have the right to:

  • access a copy of your personal data

  • have inaccurate data corrected

  • have your data deleted

  • restrict or object to how we use it, including at any time for direct marketing

  • receive your data in a portable format

  • withdraw consent at any time, without affecting earlier use

9. Contact and complaints

Please contact us first at info@katieko.studio.