Last updated: 20 May 2026

1. Who we are

Animworks Ltd (company number SC674770) is a limited company registered in Scotland. Our registered address is 5 South Charlotte Street, Edinburgh, EH2 4AN, United Kingdom. In this policy, “we”, “us”, and “our” refer to Animworks Ltd.

We operate the website anim.works, an online marketplace and learning platform for animation professionals. We sell digital products, online courses, and facilitate a vendor marketplace where third-party creators can list and sell their own products.

For data protection purposes, Animworks Ltd is the data controller. If you have any questions about how we handle your personal data, you can contact us at support@anim.works.

2. What personal data we collect

We collect personal data in the following ways:

2.1 Account registration

When you create an account, we collect your name, email address, and a password. If you register as a vendor, we also collect business and payment information necessary to process payouts.

2.2 Purchases

When you make a purchase, we collect your billing name, email address, billing address, and payment information. Payment card details are processed securely by our payment provider, Stripe, and are never stored on our servers. If you provide a VAT number for business purchases, we collect and verify that too.

2.3 Course enrolment

When you enrol in a course, we track your progress, quiz results, and completion status to provide you with the learning experience and any certificates.

2.4 Email and newsletters

If you opt in to our mailing list, we collect your name and email address. We use MailPoet to manage our email lists and send newsletters. You can unsubscribe at any time using the link in every email.

2.5 Contact forms

When you use our contact form, we collect your name, email address, and the content of your message.

2.6 Cookies and analytics

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how you use our site. See Section 7 below for full details on cookies.

2.7 Vendor marketplace

If you apply to become a vendor through our marketplace, we collect additional information including your portfolio, professional background, and payment details for commission payouts.

3. Why we process your data (legal bases)

Under UK GDPR, we process your personal data on the following legal bases:

• Performance of a contract — to create your account, process your purchases, deliver courses, and manage your vendor account.
• Legitimate interests — to improve our website and services, prevent fraud, and ensure security. Our legitimate interests do not override your fundamental rights.
• Consent — to send you marketing emails and newsletters. You can withdraw consent at any time.
• Legal obligation — to comply with tax, accounting, and other legal requirements (for example, retaining transaction records).

4. Who we share your data with

We share your personal data only where necessary and with the following categories of recipients:

• Stripe (payment processing) — processes your payment card details securely. Stripe’s Privacy Policy.
• Mailgun / MailPoet (email delivery) — delivers transactional and marketing emails on our behalf.
• Cloudflare (security and performance) — provides CDN, DDoS protection, and web application firewall services. Cloudflare’s Privacy Policy.
• BunnyNet (video hosting) — hosts and delivers course video content.
• Hostinger (web hosting) — our website is hosted on servers managed by Hostinger. Your data is stored on servers located in the European Economic Area.
• Marketplace vendors — if you purchase a vendor’s product, the vendor receives your name and email address to fulfil the order. Vendors are required to handle your data in accordance with applicable data protection law.

We do not sell your personal data to third parties. We do not share your data with advertisers.

5. International data transfers

Some of our service providers (Stripe, Cloudflare) are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner’s Office, or reliance on adequacy decisions.

6. How long we keep your data

• Account data — retained for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.
• Purchase records — retained for 7 years after the transaction to comply with UK tax and accounting requirements.
• Course progress data — retained for as long as your account is active.
• Marketing consent records — retained for as long as you remain subscribed, plus 3 years after unsubscription as evidence of consent.
• Contact form messages — retained for up to 2 years.

7. Cookies

Cookies are small text files stored on your device when you visit our website. We use the following types:

7.1 Strictly necessary cookies

These are required for the website to function. They include session cookies that keep you logged in and WooCommerce cart cookies. These cannot be disabled.

7.2 Functional cookies

These remember your preferences, such as your preferred currency or language. They improve your experience but are not essential.

7.3 Analytics and performance cookies

We use Cloudflare Web Analytics to understand how visitors use our site. Cloudflare Web Analytics is privacy-focused and does not use client-side state (such as cookies or localStorage) to collect usage metrics, and does not fingerprint individuals.

7.4 Third-party cookies

Our payment provider Stripe may set cookies when you interact with the payment form at checkout. These are necessary for fraud prevention and secure payment processing.

You can manage your cookie preferences at any time using the cookie banner on our website, or by adjusting your browser settings. Note that disabling strictly necessary cookies may prevent you from using parts of our website.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your personal data (subject to legal retention requirements).
• Right to restrict processing — you can ask us to limit how we use your data.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at support@anim.works. We will respond within one month.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, or by calling 0303 123 1113.

9. Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on our website or by email. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact us

Animworks Ltd
5 South Charlotte Street
Edinburgh, EH2 4AN
United Kingdom

Company number: SC674770
Email: support@anim.works