Home / Security & Confidentiality
Security & Confidentiality

Your images, handled with care.

When you send unreleased campaigns, collections or product, confidentiality isn't a nice-to-have — it's the job. Here is exactly how we protect your work, so your legal and procurement teams can approve us without friction.

Request our NDA   About the studio
  • NDA signed before any files move
  • Secure transfer through your system
  • Access limited to your assigned team
  • Defined retention & deletion
  • Unreleased work never shown publicly
  • White-label — we stay invisible
NDA & agreements

We sign before we start.

We will sign your NDA, or provide ours, before a single image is shared. Confidentiality agreements are standard for every studio, agency and brand partner — not an upgrade you have to ask twice for. For ongoing volume, we work under a simple master agreement so your team never has to re-paper each project.

How we protect your files

Six commitments on every project.

Secure transfer

Files move through your preferred channel — your Dropbox, Drive, WeTransfer, FTP or portal. Where possible we work inside your system so images stay under your control.

Restricted access

Only the dedicated retoucher and QC lead on your account can open your files. Access is need-to-work, not shared across the studio.

Retention & deletion

We keep files only for the agreed working and backup window, then delete on request or on a schedule you set. No indefinite storage.

Confidential by default

Unreleased campaigns, collections and product are never used in our portfolio, social or marketing without your written permission.

White-label delivery

We deliver under your brand and stay invisible to your clients. Your relationship, your name, every time.

One point of contact

A single account lead owns communication and accountability, so there's always a name responsible for your data.

Who touches your files

Nobody works on your images without a signed agreement.

Most studios will not tell you how they absorb a campaign spike. Here is exactly how we do it, so there are no surprises during your busiest month.

A core team of 58

Your account is assigned to named retouchers on our own floor, with six QC managers covering three shifts and a project manager who owns the relationship.

Vetted partner studios for peaks

When volume runs beyond our floor, four partner studios take the overflow. Every one of them has signed a written confidentiality agreement with us, on the same terms we sign with you — so your files never sit outside a contract. What does not change is the last step: every image still passes our own QC managers here before it reaches you. The hands can scale. The check does not move.

Ongoing work moves in-house

On a continuing contract we hire against your volume until your account runs entirely on our own floor. If a sudden spike means partner studios are used in the meantime, we will tell you before it happens, not after.

Data protection & GDPR

What your legal team will ask for.

If you are in the UK or the EU, procurement usually needs the same four answers before anything can be signed. Here they are, without a call. The longer version — when a product image is personal data at all, which SCC module applies, and the eight questions to ask any studio — is on sending product images outside the EU.

We sign your DPA

You remain the data controller. We act as your processor and work only on your documented instructions. Send us your data processing agreement and we will sign it — if you do not have one, we can work from a standard Article 28 processor agreement instead.

Your work is produced in Bangladesh

Our production floor is in Bangladesh — think of it as your own post-production house, staffed and running for your account. It sits outside the UK and EEA, so where your agreement requires Standard Contractual Clauses or the UK Addendum for that transfer, we sign those too.

Partner studios are named sub-processors

The four partner studios that absorb overflow are sub-processors in GDPR terms. We will name them on request, and they are bound by written confidentiality terms equivalent to the ones we sign with you.

Your images never train an AI model

Every image is retouched by hand. We do not push your files through generative AI tools and your work is never used as training data — not for us, not for anyone else.

FAQ

Security & confidentiality — questions

Who checks the work when it goes to a partner studio?

We do. On a genuine peak some retouching may be produced by a contracted partner studio, but every image is reviewed by our own QC managers on our floor before it is delivered. A partner studio never ships to you directly, and the first overflow batch on any account is checked image by image rather than sampled.

Will you sign our DPA?

Yes. You are the data controller and we act as your processor. Send us your data processing agreement and we will sign it, and where it requires Standard Contractual Clauses or the UK Addendum for transfer to Bangladesh, we sign those too. If you do not have your own agreement, we can work from a standard Article 28 processor agreement instead.

Do you run our images through AI?

No. Every image is retouched by hand by a named retoucher. We do not push client files through generative AI tools, and your images are never used as training data for any model.

Where is the work actually done?

In Bangladesh, on our own floor, by our own salaried team. We would rather you knew that up front than found out later. In practice it means you have a full post-production house working to your brief, at a cost no UK or US studio can match.

Does anyone outside your own studio see our files?

Most work is done by our own 58 retouchers. When volume runs beyond our floor we use four partner studios, and every one of them has signed a written confidentiality agreement with us on the same terms we sign with you. Nobody touches your images without being under contract.

Can our account be kept entirely in-house?

On a continuing contract, yes — we hire against your volume until the whole account runs on our own floor. For a one-off spike we may need partner capacity to hit your deadline, and we will tell you before that happens rather than after.

Do you sign NDAs?

Yes. We sign your NDA or provide ours on request before any files are shared. NDAs are standard for our studio, agency and brand partners.

How are files transferred?

Through your preferred secure channel — your Dropbox, Google Drive, WeTransfer, FTP or shared portal. We work inside your system where possible so files stay under your control.

Who can access our images?

Only the dedicated retoucher and QC lead assigned to your account. Access is limited on a need-to-work basis, not shared studio-wide.

How long do you keep our files?

Files are retained only for the agreed working window and backup period, then deleted on request or on a schedule you set.

Is unreleased work kept confidential?

Always. Unreleased campaigns, collections and product are never shown in our portfolio, social or marketing without your written permission.

Ready when you are

Send 5 images. Get them retouched free.

Test our quality risk-free — NDA first if you prefer. No commitment, no card.

No payment, no commitment. We reply within one business day.