Register

Legal Privacy

Privacy policy

Last updated 23 September 2026 · Controller: HyStudio

This policy explains how we handle personal data for visitors and registrants based in the United Kingdom, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For a full breakdown of the rights summarised in section 7, see our Data Rights page. For how we use cookies specifically, see our Cookie Policy.

1. Who is the controller

The controller of your personal data is HyStudio, trading as HySelective, registered address 8 Thistle Court, Manchester, M2 5BQ, United Kingdom.

We offer the Day One Studio program to UK residents, so where we process the personal data of individuals in the UK, UK GDPR applies to that processing regardless of where we are established.

For any question about this policy or to exercise your rights, write to contact@hyselective.com. That address is also our contact point for data-protection requests.

2. What data we collect

  • Registration form data — your name, email address, country, optional phone or messenger handle, your stated experience level, the hours per week you can commit, your optional free-text answer, and the consents you gave.
  • Analytics data via Microsoft Clarity — if you accept analytics cookies: pages viewed, clicks, scrolling, mouse movement, session recordings and heatmaps, approximate location derived from IP, device, browser and referrer.
  • Technical log data — IP address, timestamps and request data recorded by our hosting provider for security and troubleshooting.

We do not collect card or bank details through this website. Payment is arranged separately after registration.

3. Why we use it, and on what legal basis

  • To enrol you and reply to you — performance of a contract, or steps taken at your request before a contract (Art. 6(1)(b) UK GDPR).
  • To send program updates and lesson announcements — your consent, given by ticking the optional marketing box (Art. 6(1)(a) UK GDPR). You can withdraw it at any time.
  • To run Microsoft Clarity analytics — your consent, given in the cookie bar in line with the Privacy and Electronic Communications Regulations (PECR) and Art. 6(1)(a) UK GDPR. Declining changes nothing about your access to the site.
  • To keep the site secure and prevent abuse — our legitimate interest in protecting the service (Art. 6(1)(f) UK GDPR). This includes the hidden anti-spam field on the form.
  • To meet accounting and tax duties — compliance with a legal obligation (Art. 6(1)(c) UK GDPR), where an invoice has been issued.

4. Cookies and similar technologies

We use a small number of cookies and local-storage entries, split between strictly necessary ones and analytics ones that only load once you accept them. The full list, what each one does, and how to change your choice is in our Cookie Policy.

5. Microsoft Clarity and international transfers

We use Microsoft Clarity as a processor to understand how this site is used. Clarity may record your session, including interactions and page content, and may process that data on infrastructure outside the United Kingdom, including in the United States and the EEA. Where we or Microsoft transfer UK personal data internationally, we rely on the UK International Data Transfer Agreement (IDTA), the UK Extension to the EU–US Data Privacy Framework, or the UK's own adequacy regulations, as applicable, together with Microsoft's supplementary safeguards.

Microsoft's own privacy statement is at privacy.microsoft.com/privacystatement. Clarity only loads after you accept analytics cookies.

6. How long we keep data

  • Registration enquiries that do not lead to enrolment: up to 24 months, then deleted.
  • Enrolled student records: for the duration of your access, plus the statutory accounting retention period that applies to us.
  • Marketing consent records: until you withdraw consent, plus a short record of the withdrawal itself.
  • Clarity analytics: retained by Microsoft according to its Clarity retention schedule, currently up to 13 months.
  • Server logs: a short rolling window kept by our hosting provider.

7. Your rights, in brief

Under UK GDPR you can ask us to give you access to your data, correct it, erase it, restrict how we use it, or provide it in a portable format. You can object to processing based on legitimate interest, and you can withdraw any consent you have given at any time — including by using the unsubscribe link in our emails or the "Cookie settings" link in the footer of this site. These rights, how to use them, and our response times are set out in full on our Data Rights page.

Write to contact@hyselective.com and we will respond within one calendar month. If you believe we have handled your data badly, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator — details are on the Data Rights page.

8. Who else sees your data

Only the people and services we need to run the program: our hosting provider, our email provider, our accountant, the platform that delivers the lessons, and Microsoft Clarity for analytics. Each acts as a processor under contract. We do not sell personal data and we do not share it for third-party advertising.

9. Children

This site and the program are not directed at children under 16, and we do not knowingly collect their data. If you believe a child has registered, write to us and we will delete the record.

10. Changes to this policy

If we change how we handle data, we update this page and the "last updated" date above. Material changes affecting enrolled students are announced by email.

Last updated 23 September 2026.