Privacy policy

The short version

This website sets no cookies. It runs no analytics, no tracking pixels, no advertising tags and no third-party scripts of any kind. Nothing is stored on your device and nothing follows you to another site.

The only personal information we hold is what you deliberately send us: an enquiry, an application, or an email.

Who we are

Bartley Studio is operated by Bartley Family Ventures Pty Ltd (ABN 66 696 518 733), Ste 302/13 Wentworth Ave, Sydney NSW 2000, Australia. For anything in this policy, contact us at the address at the bottom of this page.

What we collect

Two things, and only two.

• What you send us. If you complete the application form or email us, we receive what you chose to put in it: typically your name, email address, store URL, product category, monthly ad spend band and whatever you write in your own words.
• Technical request data. The site is served through Cloudflare, which processes standard request information such as IP address, browser type and the page requested in order to deliver the page and protect against abuse. We do not build profiles from this and we do not use it for marketing.

Why we hold it, and on what basis

We use what you send to answer you, to quote for work, and to carry out work you engage us for. Where the EU or UK GDPR applies, our lawful bases are: performance of a contract, or steps taken at your request before entering one; and our legitimate interest in responding to enquiries about our services and in keeping the site secure.

We do not sell personal information, we do not share it with advertisers, and we do not use it for automated decision-making or profiling.

How long we keep it

Enquiries that do not lead to work are deleted within twelve months. Records relating to work we carried out are kept for seven years, because tax and business records law requires it.

Who else sees it

Only the suppliers we need to run the business:

• Cloudflare, which hosts and serves this website.
• Our email provider, which carries correspondence.
• Higgsfield, which generates imagery and receives no information identifying you.
• Anthropic, which is where advertisements are assembled and where brand assets are used.
• Our accountant and, where required, a tax authority.

Where AI fits in, and what we send it

The imagery we produce is made with generative AI tools. That is the service rather than a hidden detail of it, and it means part of what you send us is processed by third parties. Which part depends on the stage.

The work happens in two stages using two different providers, and they deliberately receive different things.

• Stage one, generating the imagery, uses Higgsfield. It receives the product photograph and a description of the environment to build around it. It does not receive your business name, your logo, your store URL or your contact details, because it does not need them to draw a room.
• Higgsfield does not currently offer a way to opt out of model training. We manage that by controlling what reaches it rather than by relying on a setting that does not exist. The single exception is branding physically present on the product in the photograph, which cannot be removed without misrepresenting the product.
• Stage two, assembling the advertisement, uses Anthropic (Claude and Claude Design). This is where brand assets are needed and used: your business name, your logo, your store URL. Our account is configured so that material sent to Anthropic is not used to train its models.
• OpenAI is named here because we may add it to the second stage. We do not use it today, and this page will say so before we do.
• None of them receives your contact details, your ad spend figures, your account data or whatever you wrote in the application form. Those exist so that we can reply to you and run the work.
• None of it is ever sold, licensed, shared with advertisers, or used on another client's work.

Material you send us for a project

Product photographs and brand material you send for a project are yours. We use them to do the work you engaged us for and for nothing else. We do not sell them, license them or use them for another client.

We keep them while the project runs and for twelve months afterwards, so a follow-up batch can match the first. Ask us to delete them sooner and we will, and we will confirm when it is done.

Where it goes

Our suppliers operate internationally, so information may be processed outside your country, including in the United States and the European Union. Where the EU or UK GDPR applies to a transfer, it is made under the appropriate safeguards those regimes require, such as Standard Contractual Clauses or an adequacy decision.

Your rights

Wherever you are, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email us at the address at the bottom of this page and we will respond within thirty days. Email rather than post: our registered office is care of our accountant, so a letter takes a detour.

If the EU or UK GDPR applies to you, you also have the right to restrict or object to processing, the right to data portability, the right to withdraw consent where we relied on it, and the right to complain to your national supervisory authority.

In Australia you may complain to the Office of the Australian Information Commissioner. In New Zealand you may complain to the Office of the Privacy Commissioner. We would rather you told us first, so we can fix it.

Cookies

There are none. Not necessary ones, not analytics ones, not preference ones. If that changes, this section changes with it and, where consent is legally required, you will be asked before anything is stored.

Children

This is a business-to-business service and is not directed at anyone under 16. We do not knowingly collect information about children.

Changes

We update this page when what we do changes, rather than on a schedule. It was last updated on 13 August 2026.

Contact

Questions about either of these go to hello@example.com.