01Who is responsible for your information
This notice explains how the operator of this website handles personal information collected through the website. It covers project inquiries, security verification and optional website analytics. Separate client agreements may describe additional processing during a commissioned project.
Website operator: [Legal business name and operating jurisdiction]. Privacy contact: [Privacy and legal contact email]. These details must be completed before this draft is published.
02Information we collect
The inquiry form asks for your full name, email address and estimated budget. You can also provide your mobile number, company name, website, service interests, project goals, timeline and referral source. These additional fields can be left blank.
Please share only information relevant to your inquiry. Do not send passwords, payment-card details, identity documents or sensitive personal information through the form.
- Information you choose to include in correspondence or follow-up conversations.
- Technical information used by hosting and security services, which may include IP address, request details and browser or device signals. Abuse-prevention counters use short-lived keyed identifiers in Cloudflare D1, without storing raw IP addresses or inquiry content there.
- Website usage information if optional Google Analytics is configured and you choose to allow it.
03Why we use information
We use inquiry details to understand your request, assess project fit, prepare a response and discuss a possible engagement. We also use relevant technical information to operate the website, prevent abuse and investigate delivery or security problems.
Submitting the form does not subscribe you to a newsletter. The current inquiry flow does not create an account or automatically enter your information into a marketing list.
04The basis for processing
Where applicable data-protection law requires a legal basis, responding to a requested proposal may involve taking steps at your request before a contract. Website operation and proportionate security processing may rely on legitimate interests, subject to the applicable balancing assessment. Optional analytics is requested through a separate choice.
The operator must confirm the legal bases that apply to its actual operations, including any processing required by law, before this draft is published. A future purpose must be assessed and explained rather than assumed to be covered by an earlier inquiry.
05What happens when you send an inquiry
The form sends your details to the website’s serverless endpoint. The endpoint validates the fields, checks the request and, when configured, verifies a Cloudflare Turnstile security token. A visitor IP address may be sent to Turnstile for verification.
When email delivery is configured, Resend receives the inquiry details to deliver a notification to the agency inbox. The current website code does not save submissions to an application database. Copies can remain with the email provider and in the receiving mailbox.
If delivery is not configured or cannot be confirmed, the website displays an error rather than claiming the message was sent.
06Service providers and disclosure
The intended deployment uses Cloudflare for hosting, the submission endpoint and Turnstile verification; Resend for inquiry notifications; and the operator’s chosen mailbox provider for correspondence. Google Analytics is an optional integration. Providers process information under their own terms and the operator’s applicable arrangements.
A configured booking link or social profile takes you to a third-party service. Its own privacy notice applies when you use that service. Information may also need to be disclosed where required by law or to address a legitimate security incident.
The operator must confirm the active providers, contractual arrangements and any further recipients before publication.
07Cookies, local storage and analytics choices
Google Analytics is disabled unless a valid measurement identifier is configured. If configured, its script loads only after you allow optional analytics. You can reopen the choice using the Analytics preferences control. Refusing analytics does not prevent use of the inquiry form.
The current consent interface stores your choice in browser local storage. Withdrawing consent stops future analytics collection through this integration; it does not automatically erase previously collected information or existing browser cookies. You can also manage cookies and local storage through your browser settings.
Security services may use browser storage or technical signals for abuse prevention. Before publication, the operator must document the actual cookies, storage durations and analytics settings used in the deployed website.
08International processing
Website, security and email services can process information outside the country where you live. Serving customers in a country does not mean that information remains in that country.
The operator must identify relevant processing locations and confirm any transfer safeguards required by applicable law, including contractual measures where appropriate. No particular data-residency arrangement is represented by this draft.
09How long information is kept
Inquiry records should be kept only for the period needed to respond, maintain a relevant business record, resolve disputes or meet applicable obligations. Security logs, email-provider records and browser storage can have different retention periods.
Retention schedule to complete: [Confirm inquiry, client-record and security-log retention periods]. The operator must document actual periods or clear retention criteria and align mailbox and provider settings with them.
10Your choices and privacy rights
Depending on your location and applicable law, you may have rights to access or correct personal information, request deletion, restrict or object to certain processing, or receive a portable copy of information. These rights have conditions and exceptions. Where processing relies on consent, you may withdraw that consent for future processing.
Use the privacy contact listed above to make a request. The operator may need proportionate information to verify your identity before responding. You may also be entitled to complain to the data-protection authority responsible for your location.
Any jurisdiction-specific disclosures, response periods and appeal processes must be confirmed before publication.
11Security and sensitive information
The implemented inquiry endpoint checks request origin, field values and payload size, and uses configured bot verification before email delivery. These measures reduce some risks but do not guarantee absolute security.
Keep inquiry messages limited to project information. If a project requires confidential files or access credentials, agree a suitable transfer method separately.
12Children’s information
The website is intended for people seeking professional creative and digital services. It is not designed to solicit personal information from children. If you believe a child has submitted information, contact the operator so the circumstances can be assessed and appropriate action taken.
13Changes and contact
The revision date at the top identifies this version. Material changes to processing should be explained through an appropriate notice. This policy must be updated when the website’s providers, collection practices or purposes change.
Privacy questions: [Privacy and legal contact email]. This draft remains excluded from search indexing until the operator details and deployment practices have been reviewed.