Privacy Policy.

1.1Controller

Studio Raine is a design and software development studio operating from New York City, United States. For personal data collected through this website and through enquiries, Studio Raine is the controller.

For personal data processed inside a client's platform during an engagement, including customer and fan data, the client is the controller and Studio Raine acts as a processor. That relationship is governed by clause 9 of the Terms of Service and by any data processing agreement the parties sign.

2.1Information you give us

When you text, call, email or send a direct message, we receive the contact details you use and whatever you choose to tell us, including the label or artist an enquiry relates to. The pre-filled message templates on this site are drafted on your device and nothing is sent until you send it.

2.2Information collected automatically

When you visit the site we and our providers collect technical and usage data: IP address, approximate location derived from it, browser and device type, referring page, pages viewed, and interactions with calls to action such as taps on a text, call, email or direct message link.

2.3Client account data

If you are given access to a client dashboard, we process the account details needed to authenticate you, such as an email address and authentication tokens.

2.4What we do not collect here

We do not take payments through this website and do not collect card or bank details on it. Engagement fees are invoiced or paid through a payment provider that handles those details directly.

3.1Purposes

To respond to enquiries and provide services; to operate, secure and improve the site; to measure which pages and calls to action lead to enquiries; to advertise and to measure advertising; and to comply with legal obligations.

3.2Legal bases under the GDPR and UK GDPR

Where those laws apply, we rely on: performance of a contract, or steps taken at your request before entering one, for responding to enquiries and delivering an engagement; legitimate interests for site security, aggregate analytics and business development, balanced against your rights; consent for advertising and non-essential tracking where consent is required; and legal obligation where we must retain records.

4.1Vercel Analytics

We use Vercel Analytics to measure page views and to record an event when a visitor taps a text, call, email or direct message link, together with the page it happened on. We use it to understand which pages generate enquiries.

4.2Meta Pixel

We use a Meta Pixel on this site. It reports page views and a Lead event when you tap a contact link, and it allows us to measure and target advertising on Meta platforms. Meta acts as an independent controller for its own purposes in relation to this data. Meta's own privacy policy governs what it does with it.

4.3Your choices

You can block these technologies using your browser settings, an extension, or by enabling a tracking preference signal such as Global Privacy Control. Doing so does not affect your ability to use the site or to contact us. See clause 8 for the position under United States state privacy laws.

5.1Service providers

We share personal data with providers that operate the site and our business on our instructions, including hosting and analytics infrastructure, authentication and database services, email, and advertising platforms. They may only use it to provide those services to us.

5.2Other disclosures

We may disclose personal data where required by law or legal process, to protect our rights or the safety of others, or to a successor in connection with a merger, acquisition or sale of assets. We do not otherwise disclose enquiry or client information to third parties.

5.3Client confidentiality

Information you share with us about an unreleased release, a roster or commercial terms is treated as confidential under clause 8 of the Terms of Service and is not used for marketing, publicity or any purpose outside the enquiry or engagement.

6.1Where data is processed

We operate from the United States and our providers may process personal data in the United States and elsewhere. Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on an appropriate transfer mechanism, such as the European Commission's standard contractual clauses together with the UK addendum where relevant.

7.1Retention

Enquiry correspondence is kept while the enquiry is live and for up to twenty four months afterwards so we can pick up a conversation that resumes. Engagement records, including scope documents and invoices, are kept for as long as needed to perform the contract and then for the period required by tax and limitation rules. Analytics data is kept for the retention period of the relevant provider. Client account data is deleted when the account is closed.

8.1Sale and sharing

We do not sell personal information for money. Use of the Meta Pixel described in clause 4.2 may be treated as sharing personal information for cross-context behavioural advertising under the California Consumer Privacy Act as amended. We treat it as such rather than rely on a narrower reading.

8.2How to opt out

You can opt out of that sharing by enabling a Global Privacy Control signal in your browser, by blocking the pixel with browser settings or an extension, or by emailing us at johnraine@studioraine.art with the subject line Do Not Share. We do not discriminate against anyone who exercises a privacy right.

8.3Your rights

Depending on your state, you may have the right to know what personal information we hold, to access a copy, to correct it, to delete it, and to opt out of sharing for targeted advertising. You may use an authorised agent where your state allows it.

9.1Your rights

Where those laws apply you may request access to your personal data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests or to direct marketing. Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

9.2How to exercise them, and complaints

Email johnraine@studioraine.art. We respond within the period the applicable law allows, and we may need to verify your identity first. If you are in the EEA or the UK you also have the right to complain to your local supervisory authority.

10.1Security

We apply access control on a least privilege basis, encryption in transit, separation of production credentials, and prompt revocation of access when it is no longer needed. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10.2Children

This site is aimed at businesses and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, email us and we will delete it.

10.3Changes

We may update this policy. The version and effective date at the top of the page tell you which version is current. Material changes will be reflected in a new effective date.