Privacy

Last updated: 17 September 2026

Who we are

Insurgent Studios Limited is responsible for the personal information described here. Contact us at info@insurgentstudios.com about privacy or to exercise your rights. This notice covers this website and enquiries sent to us. Our apps have their own privacy notices; our file-sharing service has a separate notice.

Contacting us

The contact form asks for your name, email address and message. We use these details to understand and respond to your enquiry and to keep track of relevant correspondence. Please avoid sending sensitive personal information or details about other people that we do not need.

Our lawful basis is our legitimate interest in responding to people who contact our business and managing those communications. We balance this against your privacy and use the information for the enquiry, not to add you to a marketing list. You choose whether to contact us; there is no legal requirement to provide these details, but we need a reply address and enough information to answer you.

You have the right to object to processing based on legitimate interests. Email us using the address above and explain your circumstances.

Where information goes

Our webserver runs on Amazon Web Services (AWS) Lightsail in London, UK. The form passes your message over an encrypted connection to Mythic Beasts for email delivery, then to our Google Workspace mailbox. Authorised people handling the enquiry can read that correspondence. We do not sell your information.

The form handler does not keep a separate database or log of submitted messages. It processes your IP address in memory to limit abusive submissions. Infrastructure and email providers may also process technical and security information to operate and protect their services. We do not use advertising or visitor analytics on this website.

Although the webserver is in London, Google Workspace and our other providers may process some information outside the UK. Their applicable data-processing terms include provisions for international transfers, such as adequacy arrangements or contractual safeguards with UK provisions. Google’s Cloud Data Processing Addendum and AWS’s data-protection information describe their arrangements. Contact us for information about the safeguards relevant to your enquiry or how to obtain a copy.

How long we keep enquiries

For enquiries that do not become client work, our policy is to delete the correspondence within 12 months after the last substantive contact. We may delete it sooner when it is no longer useful. This applies to our mailbox handling; the contact form does not automatically delete emails.

If an enquiry becomes client work, necessary correspondence becomes part of our client records. We retain those records for as long as needed to provide the work, meet applicable record-keeping obligations and deal with relevant claims. Where a specific legal obligation or dispute requires an exception, we limit what we retain and review the need for it.

Deleted email may remain temporarily in provider recovery systems or backups until those copies expire under the applicable arrangements. Those copies are not used for routine enquiry handling.

Your rights and complaints

Depending on the circumstances, you can ask to access, correct or erase your information, restrict how it is used, or object to its use. A right to portability applies in certain cases. We do not make solely automated decisions about you that have legal or similarly significant effects.

Contact info@insurgentstudios.com to make a request or raise a concern. You can also complain to the UK’s Information Commissioner’s Office or call 0303 123 1113.

These static website pages and the contact form do not set application cookies or save your preferences in local storage. Fonts are served from our own website. Pages that support automatic dark mode follow your device’s preference without saving a choice. Your browser may still cache ordinary website files.

Videos are links to Vimeo rather than embedded players. Following a video or another external link takes you to a separate website with its own privacy and storage practices. Our apps’ notices describe the apps themselves; this notice describes the website.

Signing in to our separate file-sharing service needs essential authentication cookies. SkySend saves display preferences using local storage and a language cookie. See its privacy and storage notice for details.