Privacy policy.
We collect only what we need to reply to you, keep it only as long as we need it, and never sell it. No tracking cookies, no ad pixels.
Last updated on the publish date.
1. Who we are
Juastudio runs this site. We decide how your personal data is used on this site, which makes us the controller. Questions go to privacy@juastudio.com.
2. What we collect, and why
| When you | We collect | Why | Legal basis (GDPR and UK GDPR) |
|---|---|---|---|
| Send a brief | Name, work email, company, whether you are a company or an independent professional, what you need, timing, budget band, links or files you add, what success looks like, how you heard about us | To reply and to prepare a proposal | Steps you ask for before a contract; our legitimate interest in replying to enquiries |
| Book a call | Name, email, the time you pick, anything you add to the booking | To hold the call | Steps before a contract |
| Visit any page | Anonymous page counts from Cloudflare Web Analytics, with no cookies and no personal profile; security signals such as your IP address, kept briefly to block abuse | To run the site safely and see which pages help | Our legitimate interest in a secure, working site |
We do not collect special category data on purpose. Please do not put health, financial account or other sensitive details in a brief.
3. How long we keep it
- Briefs and enquiries: 24 months from the last contact, then deleted.
- Security logs: a short period set by our hosting provider, without building a profile of you.
- If you become a client, project records are kept as our contract and tax law require.
4. Who processes it for us
A short list of companies host and run the tools behind this site. Each is bound by a contract to use your data only to provide its service to us. The full list, with what each does and where, is on our sub-processors page. We never sell or rent your data, and we do not share it for advertising.
5. International transfers
Our providers may process data in the United States and other countries. Where data leaves the UK or the European Economic Area, we rely on the safeguards the law allows, such as the EU Standard Contractual Clauses, the UK addendum, or the provider's certification under the EU US Data Privacy Framework.
6. Your rights
Wherever you live, you can ask us to:
- show you the data we hold about you, and give you a copy;
- correct it;
- delete it;
- stop or limit using it, or object to how we use it;
- move it to another provider;
- withdraw a consent, at any time, without affecting what was done before.
Residents of US states with privacy laws, including California, have the right to know, delete and correct, and to opt out of sale or sharing for advertising. We do not sell or share personal data for advertising.
Write to privacy@juastudio.com. We reply within 30 days and may ask you to confirm who you are. You can also complain to your data protection authority; in the UK that is the Information Commissioner's Office.
7. Security
Encrypted connections everywhere, strict security headers, bot protection on every form, access to stored data limited to the people who need it, with two-factor sign-in. Our security page has more.
8. Children
This site is for businesses and professionals. It is not meant for children under 16, and we do not knowingly collect their data.
9. Changes
When this policy changes, we update the date at the top. If a change affects how we use data you already gave us, we will tell you before it applies.