Legal

Privacy notice

Version 1.0 · 21 October 2026

1. Who we are

e2w studio is a growth marketing studio based in London, United Kingdom. We run this website, e2w.studio, and e2wOS, the private client workspace at app.e2w.dev.

For the processing described in this notice, e2w is the "controller" under UK GDPR, unless section 2.2 says otherwise.

2. Scope

2.1 This notice covers personal data we handle when you:

• visit our website or interact with us on social media;
• book a call or contact us as a prospect, client, partner, supplier or other business contact;
• register for or attend an event we run;
• use e2wOS as a member of e2w or a client team.

2.2 When we work for a client, e2wOS can hold personal data about that client's own contacts, such as event guests or people who email the client. For that data, the client is the controller and e2w acts as its "processor", handling the data only on the client's behalf and under its instructions. The client's own privacy notice explains how it uses that data.

3. Personal data we collect

3.1 Data you give us.

• Contact and identity data: name, business email address, job title, company and other professional details.
• Booking data: when you book a call through Cal.com, the time you chose and any notes you add.
• Communications data: the content of emails and messages you send us.
• Event data: registrations, attendance and preferences for events we run.
• Contract and billing data: details needed to agree, invoice and run our services.

We do not intend to collect special category data, such as information about health, religion or political opinions. If you share it with us, we handle it as the law requires.

3.2 Data collected automatically on our website.

• Device and usage data: IP address, browser and device type, pages viewed, referring page and similar log information, processed by our hosting and security providers.
• Visitor identification data: our website uses RB2B, which uses an identifier stored in your browser to try to match visits from business visitors in the United States to their company and, in some cases, their professional profile, such as a LinkedIn page.

3.3 Data we receive from others.

• Visitor identification providers: RB2B, as described in 3.2.
• Public sources: company websites and professional networks such as LinkedIn, for business outreach.
• Event platforms: Luma, when you register for an event we run or host with a client.

3.4 Data in e2wOS. With a client's permission, e2wOS connects to accounts that client uses for marketing, which can include LinkedIn (directly and through AuthoredUp), Luma, Google Analytics, Gmail, Google Calendar, Cal.com, Lightfield, Slack and PostHog. Depending on what is connected, e2wOS stores:

• published and planned content, with performance figures such as impressions;
• event details and guest lists, including guests' names, email addresses and RSVP status;
• calendar events and bookings, including attendee names and email addresses;
• for Gmail, the sender, subject and date of messages that match specific campaigns or suppliers, not full message contents;
• website traffic and conversion figures;
• for people who sign in: name, work email and activity in the workspace.

4. How we use personal data

• Running and securing our website: to deliver, protect and improve the site, and to detect abuse.
• Understanding interest in our work: to see which businesses visit our website and engage with our content.
• Communications and relationships: to reply to enquiries, hold booked calls and manage relationships with business contacts.
• Sales, marketing and events: to follow up with relevant professional contacts about our services and invite people to events.
• Delivering client work: to plan, publish and measure campaigns for clients, including through e2wOS.
• Contracts and administration: to onboard clients and suppliers, and to manage contracts, invoices and payments.
• Legal compliance: to meet legal obligations and to establish or defend legal claims.

5. Lawful bases for processing

We only use personal data where Article 6 of UK GDPR gives us a lawful basis. We rely on:

• Contract: to provide services to clients, run e2wOS, and take steps you ask for before a contract, such as a booked call.
• Legitimate interests: to run and secure our website, understand which businesses are interested in our work, and contact professionals about our services. We weigh these interests against your rights, collect only what we need, and you can object at any time.
• Legal obligation: where the law requires us to process data, for example for tax and accounting.
• Consent: where the law requires it. You can withdraw consent at any time.

6. How we share personal data

6.1 We never sell personal data. We share it only where needed for the purposes above, with:

• Hosting and security providers: Vercel and Cloudflare for the website and e2wOS, and Supabase for e2wOS data;
• Booking and visitor identification providers: Cal.com and RB2B;
• The services a client connects to e2wOS, as listed in 3.4;
• Clients, for data that belongs to their e2wOS workspace;
• Professional advisers, such as lawyers and accountants, where needed;
• Public authorities or courts, where the law requires it.

6.2 Our pages also load fonts from Google Fonts, project videos from LinkedIn and some images from third-party storage. Your browser connects to those providers directly, which shares your IP address with them.

7. Data from Google

e2wOS uses read-only access to Google Analytics, Gmail and Google Calendar, and only for the features described in 3.4. e2wOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train AI models. People only read it where needed to provide the service, for security, or to meet the law.

8. Cookies and similar technologies

Our own code does not set advertising cookies. Cal.com, when you open the booking form, and RB2B may store cookies or similar identifiers in your browser. If you would prefer we kept no record of your visit, email us and we will delete it. You can also block or clear cookies in your browser settings.

9. International data transfers

Some of our providers are based in, or process data in, the United States and other countries outside the UK. Where personal data leaves the UK, we rely on safeguards recognised under UK law, such as adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Agreement or Addendum.

10. How long we keep data

10.1 We keep personal data only as long as we need it for the purpose it was collected for, then delete or anonymise it.

10.2 In practice:

• Website logs: kept for the period our hosting and security providers set.
• Visitor identification data: kept while it is useful for business outreach, and deleted on request.
• Business contact, booking and communications data: kept while we have a working relationship, and for a limited period afterwards.
• e2wOS client workspace data: kept for the length of the engagement and deleted when the client asks. Disconnecting an account stops further data being collected.
• Contract and billing data: kept for the periods tax and accounting law requires.

11. Your rights

11.1 Under UK GDPR you have the right to:

• access your personal data and get a copy;
• have inaccurate or incomplete data corrected;
• have your data deleted in certain circumstances;
• restrict how we use your data in certain circumstances;
• object to our use of your data where we rely on legitimate interests, including for marketing;
• withdraw consent at any time, where we rely on it;
• receive your data in a portable format, where applicable;
• not be subject to decisions made solely by automated means that have legal or similarly significant effects on you.

11.2 To use any of these rights, email [email protected]. We may need to confirm your identity first. We aim to reply within one month.

12. Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

13. Security

We use technical and organisational measures to protect personal data from loss, misuse and unauthorised access. These include sign-in through Cloudflare Access for e2wOS, workspaces that only the client's own team can see, encryption of connected-account tokens (AES-256-GCM), and hosting with established providers. No system is completely secure, but we work to keep the risk low.

14. Children

Our website and services are for businesses and are not aimed at children. We do not knowingly collect children's personal data. If you think a child has given us data, contact us and we will delete it.

15. Changes to this notice

We may update this notice from time to time. When we do, we will change the version number and date at the top of this page, and tell you directly where the law requires it.

16. Contact us

For any questions about this notice or to use your rights, contact:

e2w studio
London, United Kingdom
[email protected]