Who is responsible for your information?
Vivid Creator Studio is an independent creative business operated by its founder. In this policy, “Vivid”, “we” and “us” mean the operator of Vivid Creator Studio, who is responsible for deciding how the personal information described here is used. This is the role known as the data controller.
This policy covers vividcreatorstudio.com, its creative studio and messages you send us about Vivid. Use our business contact tash@vividcreatorstudio.co.uk for privacy matters.
Your artwork and saved work
When you import an image or a workspace backup into a tool, the file is opened and processed in your browser. Importing a file into the studio does not send that artwork to Vivid’s website server. The same applies to the patterns, palettes, edited images and other files you create in the tools.
Your Library, saved palettes, folders and project settings are kept in a local database belonging to this website in the browser you are using. When you download artwork or a workspace backup, the file is saved through your browser to the location you choose. We do not receive a copy through that download.
You can remove individual Library images in the studio. Your browser’s site-data settings can remove all locally stored work. Clearing that data, using a different browser or device, or storage being removed by your browser can make saved work unavailable. Download your finished files and a workspace backup if you want to keep your own separate copy.
If you choose to email us an image or backup for support, the copy attached to that email becomes part of your support conversation and is handled as explained below.
Information we use and why
When you visit the website
Our hosting and security provider, Cloudflare, processes technical request information to deliver pages and protect the service. This can include your IP address, browser and device information, the page or file requested, date and time, response status and security events. Diagnostic records may also identify errors or failed requests.
We use this information to keep the website available, investigate problems and prevent unauthorised access or abuse. Our lawful basis is legitimate interests: operating a reliable, secure website and resolving technical problems.
When you sign in to the studio
Cloudflare Access checks the email address used for sign-in and records authentication and access events. The sign-in process may also handle IP addresses, browser details, login times and the result of an access check. It uses a sign-in code or a configured identity provider to verify access.
This information is used to identify authorised users and protect the studio. Our lawful basis is our legitimate interest in controlling access and keeping the service secure. An email address is needed to complete that sign-in check.
When you contact us
We receive your email address, any name you provide, your message, correspondence history and attachments you choose to send. We use them to answer your question, investigate a reported problem and follow up on the conversation.
Our lawful basis for general enquiries and support is legitimate interests: responding to people who contact Vivid and helping them use the service. Where a message is necessary to enter into or perform a contract with you, we rely on that contract or the steps you ask us to take before entering it. Where a record must be kept or disclosed by law, we rely on that legal obligation.
You choose what to include. We may be unable to investigate a particular problem without enough information to identify the tool and the step involved. Sending a support message does not subscribe you to marketing emails.
We do not use the website to make solely automated decisions about you that have legal or similarly significant effects. We do not sell your personal information.
Cookies and browser storage
Cookies are small pieces of information stored by your browser. The studio also uses a local database to remember work you choose to save. These have different purposes:
- Saved artwork and settings
- The studio’s local database stores your Library, palettes, folders and projects on your device. It remains there until you remove the work, clear the website’s storage or your browser removes it.
- Studio sign-in
- Cloudflare Access uses essential cookies, including
CF_Authorization, to recognise an authorised session. The studio’s access session is set to 24 hours. Other cookies used by the sign-in service have their own security and session durations. - Website protection
- Cloudflare may set security cookies when carrying out a security check. Their purpose is to protect and deliver the website, rather than to build an advertising profile. The Cloudflare cookie information and Access cookie information describe these cookies and durations.
The website does not currently use advertising pixels or third-party visitor analytics. Demonstration videos are hosted with the website, rather than embedded from a social network or video platform.
You can control cookies and saved site data through your browser. Blocking sign-in cookies can prevent access to the protected studio. Removing its local database deletes work saved in that browser, so download any files or backup you want to keep first.
How long information is kept
We keep personal information for as long as it is needed for the purpose it was collected for. The relevant criteria are:
- Local artwork: it remains under your browser’s storage controls, as described above. We cannot recover or remove a local copy remotely.
- Enquiries and support: correspondence is kept while the enquiry is being handled, and afterwards where reasonably needed for follow-up, a continuing support relationship, a dispute or a legal record. We consider the subject of the conversation, when it was last active and whether a reason to retain it remains.
- Website and sign-in records: routine technical records follow the hosting and access provider’s service retention settings. Relevant records may be retained for longer where needed to investigate a security incident, resolve a dispute or meet a legal obligation.
Information no longer needed for those purposes is deleted or anonymised. You can ask about a particular record using the contact details below.
How we protect information
The website uses encrypted HTTPS connections. Access to the protected studio is restricted through Cloudflare Access. We limit access to correspondence and operational records to people and service providers who need them to handle the work involved.
Locally saved artwork is also affected by the security of your device and browser. If other people use the same browser profile, they may be able to open the Library stored in it. Keep downloaded backups somewhere you control.
Your data protection rights
Depending on the circumstances and the lawful basis involved, you can ask to access a copy of your personal information, correct inaccurate information, delete it or restrict how it is used. You can object to processing based on legitimate interests. Where the legal conditions apply, you can ask for information you provided to be supplied in a portable format or transferred to another provider.
If we ever rely on your consent for a particular use, you can withdraw that consent without affecting the lawfulness of the use before withdrawal.
To make a request, email tash@vividcreatorstudio.co.uk. Explain what you would like us to do and enough detail to identify the information involved. We may need to check your identity before disclosing or changing personal information. Requests are normally free, and we normally respond within one month; where the law permits more time or a different response, we will explain why.
For artwork held only in your own browser, you can use the studio’s removal controls or your browser’s site-data settings directly. Contact us if you need help identifying those controls.
Questions or a privacy complaint?
Email tash@vividcreatorstudio.co.uk and tell us what has happened and what you would like us to look into. We will acknowledge your complaint, investigate it, keep you informed and explain the outcome.
You can also complain to the UK Information Commissioner’s Office (ICO). Visit the ICO complaints page or call 0303 123 1113. The ICO recommends giving the organisation concerned an opportunity to address the issue first.
Changes to this policy
We update this policy when the way Vivid handles personal information changes. The date at the top shows the latest version. If a change materially affects how information already collected is used, we will explain it through an appropriate notice.