We respect your privacy and are committed to protecting your personal data. This Privacy Notice explains what data we collect, how we use it, and your rights.

This Notice applies to:

• Visitors to our websites and digital services.

• Customers purchasing Acorn Explorers, Acorn Stories, or other ASP products.

• Parents, schools, and organisations engaging with Acorn Pathways or other programmes.

1. Who We Are

Acorn Studio Press Ltd (“ASP”, “we”, “us”) is the data controller responsible for your personal data.

• Company No: 16717513

• Registered office: Acorn Studio Press, Unit A, 82 James Carter Road, Mildenhall Industrial Estate, Suffolk, IP28 7DE

• Email: hello@acornstudiopress.com

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identification data (name, email, postal address, phone number).

• Account data (login details, preferences, subscription history).

• Payment data (processed securely by third-party providers; we do not store full card details).

• Order data (products purchased, delivery information, subscription cycles).

• Digital use data (IP address, device type, browser, usage logs, cookies).

• Child-related data (only where provided by parents/schools for educational use; we do not knowingly collect personal data directly from children under 16).

• Correspondence (emails, feedback, support queries).

3. How We Use Your Data

We use your data to:

• Process and deliver your orders and subscriptions.

• Manage your account and provide customer service.

• Provide access to digital extras and online content.

• Communicate updates, service notices, and (with your consent) marketing.

• Analyse usage and improve our services.

• Comply with legal obligations and prevent fraud.

We only process your data where we have a lawful basis under GDPR, including:

• Contract (to fulfil your order/subscription).

• Consent (for marketing or optional extras).

• Legal obligation (to keep tax and accounting records).

• Legitimate interest (improving our services, protecting security).

4. Children’s Privacy

• Our products are designed for families and schools, but accounts must be created and managed by an adult.

• We do not knowingly collect personal data directly from children under 16.

• Where data about a child is provided (e.g., for school Pathways programmes), it must be supplied by a parent, guardian, or school, and is handled only for the purpose of delivering the programme.

5. Sharing Your Data

We may share your data with trusted third parties who help us provide our services, including:

• Payment processors.

• Delivery and logistics partners.

• IT hosting, email, and analytics providers.

• Professional advisers (legal, accounting, insurance).

We do not sell your data.

If required by law, we may disclose your data to regulators, courts, or law enforcement.

6. International Transfers

If we transfer data outside the UK/EEA (e.g., for hosting or cloud services), we ensure appropriate safeguards are in place (such as adequacy decisions, contractual clauses, or equivalent protections).

7. How Long We Keep Your Data

We keep data only as long as necessary for the purposes set out above, including to meet legal, accounting, or reporting requirements.

• Order and payment records: minimum 6 years (legal requirement).

• Account data: while active, and up to 2 years after closure.

• Marketing data: until you opt out.

8. Your Rights

Under data protection law, you have the right to:

• Access the personal data we hold about you.

• Request correction of inaccurate data.

• Request erasure in certain circumstances.

• Object to processing based on legitimate interests.

• Withdraw consent where we rely on consent (e.g., marketing).

• Request restriction of processing or data portability.

• Lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

To exercise your rights, contact us at hello@acornstudiopress.com.

Acorn Studio Press — Privacy Notice

Last updated: 15 September 2025