Privacy notice for poppop.studio

Last updated 31 July 2026

About this privacy notice

This notice explains how we collect and use your personal data when you use poppop.studio. We follow the General Data Protection Regulation (GDPR).

Who we are

We are the team at poppop.studio. We control how your personal data is used.

The data controller is Jonathan Holden, jonny@poppop.studio.

What personal data we collect and how we use it

WhenWe collectWhy we collect itHow long we keep it
When you use our contact form
  • Your name
  • Your email address
  • The message you send us
  • When you contacted us
  • We need it to reply to your message
  • We need it to keep a record of our conversation
  • Our legal basis is our legitimate interest in responding to your message
2 years after your last message
When you sign up for our newsletters
  • Your email address
  • Your name (optional)
  • When you subscribed
  • Which newsletters you signed up for
  • You've asked to receive our newsletters
  • Our legal basis is your consent
Until you unsubscribe
When you create an account
  • Your name
  • Your email address
  • Your password (stored securely)
  • Your local authority
  • When you registered
  • We need it to create and manage your account
  • Our legal basis is our legitimate interest in providing the account-based tools you've registered to use
While your account is active. If you ask us to delete your account, we'll delete your data too.
When you use Ask Ai
  • The question you asked
  • The answer given, with its sources
  • When you asked
  • Your name, if you were signed in
  • To see how the tool is actually used and to improve it
  • Our legal basis is our legitimate interest in running and improving Ask Ai
12 months, then deleted automatically
When you use Spoke
  • The checklist progress you save
  • You've asked us to save your checklist progress
  • Our legal basis is our legitimate interest in providing the Spoke checklist tool
  • Your checklist progress is shared with colleagues at the same local authority, matched by your email domain, rather than kept as a private individual copy
While your account is active. If you ask us to delete your account, we'll delete your data too.
When you read Learn lessons while logged in
  • Which lessons you've completed
  • To show you your own progress through a course
  • Our legal basis is our legitimate interest in showing you your progress
  • This is private to your account, not shared with anyone else
While your account is active. If you ask us to delete your account, we'll delete your data too.

Your data protection rights

You have the right to

  • See what data we have about you
  • Change any incorrect data
  • Have your data deleted
  • Stop us using your data
  • Move your data somewhere else
  • Remove your consent for newsletters

To use any of these rights, please contact us through our contact page.

Cookies and tracking

We use only necessary cookies to make our website work. We don't use tracking cookies.

International transfers

We keep your data in the European Economic Area (EEA).

How to complain

If you're unhappy with how we use your data, you can

  • Contact us so we can try to fix the problem
  • Contact your local data protection authority, for example the ICO (opens in a new tab) in the UK

Updates to this notice

When we change this notice, we'll update the date at the top of this page.

How to contact us

Use our contact page or email jonny@poppop.studio if you have questions about your privacy.