1. INTRODUCTION
Who are we?
We are Stink Digital Limited (t/a “Stink Studios”), a company registered under company number 07141790 and registered office at Morelands, 5-23 Old Street, London, EC1V 9HL. When we decide the means or purpose of processing your personal data, we are the data "controller."
What’s this policy about?
"This policy explains how we process your personal data as a data controller. We update this policy from time to time so please check back in. The policy applies to your access to and use of our website stinkstudios.com (the “Services”). Please note that other websites/services not mentioned here are not operated by us, and you should refer to the privacy policies on those sites to understand how your data is used."
How do you contact us?
If you have questions about this policy or to exercise your rights, write to us: privacy@stink.co. If we can’t resolve your issue, you can also get in touch with the Information Commissioner’s Office in the UK at: https://ico.org.uk/concerns (or if you live outside the UK in a European country, you can submit a complaint to the supervisory authority in your country).
What are your rights?
You have the following rights, although these rights may be limited in some circumstances:
Ask us to send a copy of data to you or someone else. Ask us to restrict, stop processing, or delete your data
Object to our processing of your data
Object to use of your personal data for direct marketing
Ask us to correct inaccuracies
If we rely on consent to process data, or send direct marketing, you can withdraw consent by contacting us via the link above.
2. YOUR PERSONAL DATA AND HOW WE USE IT
I. Enquiry data
Information we receive when you get in touch with questions or when working with us.
Your data:
Name
Contact details
Other personal data you send to us as part of enquiries or instructions.
How long we keep it:
6 years from when our relationship with you ends.
How we use it:
We process this information to respond to your enquiries.
Legal basis:
We may process this information in accordance with the terms of our contract with you (where we need this information to provide services to you) or to take steps at your request prior to entering into a contract. We also use this to pursue our legitimate interests in responding to enquiries, and in order to understand our customers and improve our website and services.
More information:
You may be required to provide us with certain information in order for us to respond to your enquiries.
Sources:
We collect this information from you.
Recipients:
We may store this information with Amazon Web Services.
II. Application/Interview Data
Information provided through our website job application forms, including:
Name, contact details, current employer, LinkedIn profile.
Personal data included in your resume/CV or covering letter.
Details of your website, portfolio, show-reels or other experience, and your references.
Education, employment and professional accreditation history.
Voluntary information (gender, race/ethnicity, veteran status, disability information).
How long we keep it:
If unsuccessful, application data is typically deleted after 12 months. Otherwise, it will be transferred to your employee file & retained in accordance with internal staff privacy policies.
How we use it:
We use this information to decide whether to recruit you.
Legal basis:
Our legitimate interests in deciding whether you are a suitable candidate and whether to appoint you.
Entering, performing, or taking steps preparatory to entering, contracts with you.
Complying with our legal obligations.
Where you provide voluntary information which includes special category data such as relating to ethnic origin or health, we process that with your consent for the purposes displayed to you when it is submitted.
More information:
You are required to provide most of this information in order to apply for roles with us.
Sources:
We collect this data from you directly through forms on our website. Those forms are hosted for us by Greenhouse Software, Inc. in the United States.
Recipients:
We share this information with other members of our group.
III. Marketing Data
We process the following information about you in order to provide information, and make suggestions and recommendations to you about: (i) news and updates relating to us, our partners, products, services and content; (ii) content, goods and services that may interest you; and (iii) other promotional activity and events we think may be of interest:
Full name
Contact information (such as email address)
Other information collected and clearly identifiable to you at the point of your signing up to our marketing communications.
How long we keep it:
Until you have opted-out of marketing communications.
How we use it:
We process this information to send you marketing communications.
Legal basis:
We process your personal data in order to send marketing communications on the basis of our legitimate interests, being our legitimate business interests in marketing our activities and promoting the success of our business and our website, apps, content, products and services. If the information is not of interest for you, you can opt-out at any time by letting us know, including by emailing us.
Sources:
We collect this personal data from you.
Recipients:
We may use Mailchimp to manage our email marketing.
Where explicit retention periods are not described above, we hold data for as long as necessary bearing in mind the purpose for which it was collected. At the end of the retention period, we assess whether it is necessary to continue to retain information to achieve the purposes for which it was collected. To determine appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of unauthorised access, and legal requirements.
IV: Creep Fake - Halloween AI Experience
If you use our Halloween experience, we process your photograph, and the words you speak, to provide that experience.
How long we keep it:
None of the material is stored for longer than an hour after you’ve finished with the experience.
How we use it:
Your photograph is used to create an “evil twin” image and the words you type are used to generate chat responses which are fed back to you.
Legal basis:
We process this personal data only if you have given your consent when trying out the experience. You can withdraw consent at any time by email to privacy@stink.co.
Sources:
We collect this personal data from you.
Recipients:
We use OpenAI to generate responses, Replicate.com to create images, Google for face detection and transcription, and ElevenLabs to generate audio from text.
3. STORAGE, TRANSFERS, AND DISCLOSURE
Storage & Transfers:
Save where indicated otherwise in this policy, your personal data is securely stored in the UK. Where we use data processors outside the UK and European Economic Area, and transfer personal data to a country which does not provide an adequate level of protection, we use contracts which give personal data the same protection it has in Europe and the UK. For more information drop us a line using the contact details at the start of this policy.
Disclosure:
Other than as set out above, we may disclose your personal data:
Where required by law, government, competent authorities or the courts or to establish, exercise or defend our legal rights, and for the purposes of preventing crime and fraud (for example, we may share personal data with our professional advisors, investigators, or credit reference agencies).
With members of our corporate group, insurers, advisers, suppliers and subcontractors, as necessary for the purposes set out in this policy.
If involved in an investment, merger, acquisition, or sale of our organisation or assets, personal data we hold may be shared on the basis of the legitimate interests of us, our shareholders, customers and other parties to a transaction, unless those interests are outweighed by prejudicial impacts upon you.