Last updated 12 August 2026.
Who we are
Ship It Studio is a trading name of Keelson Holdings Ltd, a company registered in England and Wales, company number 17359226. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
Keelson Holdings Ltd is the data controller for everything described on this page. We are registered with the Information Commissioner's Office under reference ICO:00015117984.
Anything to do with your data: info@shipitstudio.co.uk.
What this site actually collects
- The contact form. Three fields: your name, your email address and what you write in the message box. When you press send, the page sends those three things — plus the subject line “New enquiry from Ship It Studio” and a hidden anti-spam field that a real person leaves empty — to Web3Forms, which forwards them to our inbox. Nothing else is attached to it.
- WhatsApp. The green buttons open a WhatsApp chat with us. If you send that message, we see your WhatsApp number, your profile name and whatever you write, in WhatsApp — the same as any other WhatsApp conversation.
- Email. Several links open your own email app addressed to info@shipitstudio.co.uk. Nothing reaches us until you press send.
- Paying us. The payment buttons on our start page hand you over to Stripe's own checkout pages. Stripe takes your card and billing details on its own systems — we never see or hold your card number. What comes back to us is the record of the payment, typically your name, your email address and the amount.
That is the complete list. We don't ask for anything else, and there is no account to create.
Why we use it, and our lawful basis
- Answering your enquiry, and building the free demo we offer. Legitimate interests — Article 6(1)(f) UK GDPR. You contacted us about your business and we have an obvious interest in replying. Tell us to stop and we will.
- Quoting, then designing, building, launching and looking after your site once you hire us; taking payment for it. Performance of a contract, or steps taken at your request before entering one — Article 6(1)(b) UK GDPR.
- Keeping the site online, quick and free of abuse. Legitimate interests — Article 6(1)(f). A hosted website logs requests; that's how hosting works.
We don't profile you, we don't make automated decisions about you, and we won't add you to a mailing list you didn't ask for.
Who else sees it
- Vercel — our hosting provider. Every page here is served by Vercel, so Vercel's servers handle your IP address and the usual web-server request logs.
- Web3Forms — the contact form posts to api.web3forms.com, which emails your enquiry to us. Your message passes through their systems before it reaches our inbox. We have not verified which country their servers sit in, so we can't promise your details stay in the UK. If that matters to you, email info@shipitstudio.co.uk directly instead — it avoids Web3Forms entirely and gets you the same reply.
- Google — every page on this site loads two fonts from fonts.googleapis.com and fonts.gstatic.com. Your browser fetches them from Google directly, which tells Google your IP address and which page you were on. We'd rather it didn't, and we intend to move the fonts onto our own server.
- Stripe — only if you click a payment button. Stripe is the payment processor; it handles the card details and holds its own records of the transaction.
- WhatsApp (Meta) — only if you choose to message us there. That conversation lives on WhatsApp under their terms, not ours.
- Our email provider — once your enquiry is forwarded, it sits in our inbox like any other email.
We don't sell personal data, we don't rent it, and we don't pass it to anyone beyond the list above.
The demo sites
We publish concept demos for prospective clients at shipitstudio.co.uk/demos/. Nothing on any of those pages sends anything to us.
A handful of them have a form on the page — four beauty-clinic demos with an enquiry form, and a payroll demo with a pay calculator. Every one of those is switched off in the code: the page stops the submission where it stands, and nothing is transmitted anywhere. The payroll demo keeps what you type in your own browser's local storage, under the key paybridge-demo, so the demo still works if you reload the page. It never leaves your device, and clearing your browser data removes it.
Most demo pages load a Vercel analytics script that counts page views, and many load the same fonts from Google. If a demo carries a business's contact details, those were taken from that business's own public listing.
How long we keep it
- Enquiries that don't become work — up to 24 months after we last spoke, then deleted.
- Client records, invoices and payment records — six years after the end of the work, because tax and accounting rules require us to keep the paperwork.
- Server logs — held by Vercel on its own retention schedule, which we don't set or control.
Your rights
Under UK GDPR you can ask us for: access to the personal data we hold about you; rectification if it's wrong; erasure; restriction of how we use it; portability of the data you gave us; and you can object to anything we've based on legitimate interests.
Email info@shipitstudio.co.uk. It's free, and we'll respond within one month.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You don't have to raise it with us first, though we'd like the chance to fix it.
Cookies and what's stored on your device
This site sets no cookies. That's why there's no cookie banner.
Three things can be stored on your own device, and none of them is sent to us:
- A service worker cache. This site can be installed to your home screen like an app, so a copy of a few pages, the stylesheet and the icons is kept in your browser to make it load fast and work offline. Clearing your browser data removes it.
- On iPhone and iPad, if you dismiss the “add to home screen” banner, we store a single flag (sis-ios-hide) in your browser's local storage so it doesn't nag you again.
- On the payroll demo page only, whatever you type into the calculator (paybridge-demo), so the demo survives a page reload.
Third parties your browser contacts: Google, for the fonts, on every page; Web3Forms, only when you submit the contact form; Stripe, only if you click a payment button; and Vercel's analytics script, on the demo pages only. If any of them stores something in your browser, that is theirs rather than ours.
Sites we build for clients
When we build and host a website for a client, the client is the controller of any personal data their visitors submit, and we act on their instructions. This notice covers shipitstudio.co.uk only.
Changes to this notice
If what we do changes, this page changes with it and the date at the top moves.