Skip to content
Extra Cheese

Legal · Privacy

PRIVACY POLICY

This page explains what personal information Extra Cheese collects when you use our website and services, how we use it, and the choices you have.

Last updated · January 2026

01. Who we are

Extra Cheese ("Extra Cheese", "we", "us", "our") is a creative agency that uses AI workflows to produce content, video, design and brand work for clients globally. This policy is published by Extra Cheese Studio.

If you have any questions about this policy, you can reach us at hi@extracheese.studio.

02. Information we collect

We collect information you provide directly to us — for example when you fill in the contact form, sign a project brief, send us a creative asset or email us about a job. We also collect limited technical information automatically when you visit our website.

  • Identity data: name, job title, company.
  • Contact data: email address, phone number, postal address.
  • Project data: briefs, references, files and feedback you share with us.
  • Usage data: pages viewed, device type, browser, approximate location derived from IP.
  • Marketing preferences: whether you've opted in to receive updates from us.

03. How we use your information

We use your information to respond to enquiries, deliver client work, send service updates, improve our website, comply with legal obligations and — only with your consent — to send occasional marketing updates about our work.

We do not sell your personal data. We do not use the creative assets clients share with us to train third-party AI models without an explicit written agreement.

04. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract (delivering services you've engaged us for), legitimate interests (running and improving our business), consent (marketing communications and non-essential cookies) and legal obligation (tax, accounting, regulatory).

05. Sharing your information

We share personal data only with vetted third parties that help us run the business — for example cloud hosting, analytics, email, accounting and AI tool providers. Each provider is bound by appropriate contractual safeguards.

We may also disclose information when required by law, to protect our rights, or as part of a corporate transaction such as a merger or acquisition.

06. International transfers

Some of our service providers are located outside your country of residence. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect your data during these transfers.

07. Data retention

We keep personal data only as long as needed for the purposes described above, to meet our legal obligations or to resolve disputes. Project files are retained for the duration of the engagement plus a reasonable archival period.

08. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can exercise these rights by emailing privacy@extracheese.studio. We will respond within the timeframes required by law.

09. Security

We use industry-standard security controls — encryption in transit, access controls, principle-of-least-privilege and vendor reviews — to protect personal data. No system is perfectly secure; we will notify affected individuals and regulators where required by law in the event of a breach.

10. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on this page along with an updated date. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.