PRIVACY POLICY

Extra Cheese ("Extra Cheese", "we", "us", "our") is a creative agency that uses AI workflows to produce content, video, design and brand work for clients globally. This policy is published by Extra Cheese Studio.

If you have any questions about this policy, you can reach us at hi@extracheese.studio.

We collect information you provide directly to us — for example when you fill in the contact form, sign a project brief, send us a creative asset or email us about a job. We also collect limited technical information automatically when you visit our website.

• Identity data: name, job title, company.
• Contact data: email address, phone number, postal address.
• Project data: briefs, references, files and feedback you share with us.
• Usage data: pages viewed, device type, browser, approximate location derived from IP.
• Marketing preferences: whether you've opted in to receive updates from us.

We use your information to respond to enquiries, deliver client work, send service updates, improve our website, comply with legal obligations and — only with your consent — to send occasional marketing updates about our work.

We do not sell your personal data. We do not use the creative assets clients share with us to train third-party AI models without an explicit written agreement.

Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract (delivering services you've engaged us for), legitimate interests (running and improving our business), consent (marketing communications and non-essential cookies) and legal obligation (tax, accounting, regulatory).

We share personal data only with vetted third parties that help us run the business — for example cloud hosting, analytics, email, accounting and AI tool providers. Each provider is bound by appropriate contractual safeguards.

We may also disclose information when required by law, to protect our rights, or as part of a corporate transaction such as a merger or acquisition.

Some of our service providers are located outside your country of residence. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect your data during these transfers.

We keep personal data only as long as needed for the purposes described above, to meet our legal obligations or to resolve disputes. Project files are retained for the duration of the engagement plus a reasonable archival period.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can exercise these rights by emailing privacy@extracheese.studio. We will respond within the timeframes required by law.

We use industry-standard security controls — encryption in transit, access controls, principle-of-least-privilege and vendor reviews — to protect personal data. No system is perfectly secure; we will notify affected individuals and regulators where required by law in the event of a breach.

We may update this policy from time to time. Material changes will be highlighted on this page along with an updated date. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.