Privacy notice

Draft for professional review before public launch. The controller identity, hosting provider, retention period and final contact-delivery service still need to be confirmed.

Project enquiries

The contact form collects the name, work email, organisation, current tools, process description, approximate time spent, budget range and desired outcome supplied by the visitor. The purpose is to assess the enquiry and respond with a suitable next step. Visitors should not submit passwords or financial, medical, employment or other sensitive personal data.

Current delivery setup

In the local preview, valid enquiries are stored in a restricted file on the local website server. In production, validated enquiry details are delivered privately to the studio owner through Telegram using server-side credentials. The credentials are not exposed to visitors. Telegram then processes that message under its own privacy terms.

Appointment booking

Google Calendar processes the name, email address, selected time and information needed to create the invitation and Google Meet. Google operates that service under its own privacy terms.

Security and spam prevention

The form uses field validation, size limits, a hidden spam field and basic request-rate limiting. These measures reduce routine abuse but do not guarantee complete security.

Analytics

The site contains event labels for booking, contact, demonstration and case-study interactions. No analytics data is transmitted unless an analytics endpoint is deliberately configured. If one is enabled, this notice and the cookie notice must be updated first.

Your rights and final launch details

Before launch, add the verified controller contact, lawful basis, retention period, hosting and processing providers, international-transfer information and a working procedure for access, correction, deletion and objection requests. Obtain professional legal review for the applicable jurisdiction.