LEGAL
Privacy Policy
How we collect, use and protect personal data under UK GDPR.
Last updated: 26 July 2026
1. Who we are
Bots & Bones is a creative systems studio. For UK GDPR purposes, Andrey Rybushkin trading as Bots & Bones is the data controller for personal data collected through this website.
Email: hello@bots-n-bones.com.
Website: https://bots-n-bones.com.
Country: United Kingdom.
2. What this policy covers
This policy explains how we handle personal data when you visit our website, contact us, or interact with our services.
It does not cover third-party websites linked from our site. Please review their privacy notices separately.
Last updated: 26 July 2026.
3. Personal data we collect
We may collect the following categories of personal data:
- Identity and contact data — name, email address, company or organisation name.
- Project brief data — information you submit through our contact form (including message content and optional budget).
- Technical data — IP address, browser type, device information, pages viewed, and approximate location derived from IP.
- Cookie and analytics data — only where you consent to non-essential cookies (see our Cookie Policy).
- Communications — emails and messages you send to us.
4. Why we use your data
We use personal data for the following purposes:
- Responding to enquiries and project briefs you submit.
- Providing and improving our website and services.
- Analytics to understand how visitors use the site (only with your consent).
- Security, abuse prevention, and troubleshooting.
- Legal compliance and business administration.
5. Lawful bases (UK GDPR)
We rely on the following lawful bases under UK GDPR:
- Consent — analytics cookies and any optional marketing communications.
- Contract — steps taken at your request before entering a contract (for example, responding to a project enquiry).
- Legitimate interests — operating and securing our website, and responding to business enquiries in a way you would reasonably expect.
- Legal obligation — where we must retain or disclose data by law.
7. International transfers
Some service providers may process data outside the UK. Where this occurs, we take steps to ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements or transfers to countries covered by UK adequacy regulations.
8. How long we keep data
We retain personal data only for as long as needed for the purposes collected, including legal, accounting, or reporting requirements.
Contact form and enquiry records are typically retained for up to 24 months, unless a client relationship continues or we need to keep them longer for legal reasons.
Analytics data is retained according to our analytics provider settings (currently up to 14 months).
Cookie consent preferences are stored in your browser until you clear site data or change your choice.
9. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.
No method of transmission or storage over the internet is risk-free. Please use care when sending sensitive information by email or form.
10. Your rights
Under UK GDPR you may have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability where applicable.
To exercise your rights, contact us at hello@bots-n-bones.com.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
11. Children
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy from time to time. The ‘last updated’ date at the top of this page will change when we do.
Material changes will be highlighted on this page where appropriate.
13. Contact
Questions about this policy or your personal data: hello@bots-n-bones.com.
Contact:
Bots & Bones
hello@bots-n-bones.com
United Kingdom