Privacy Policy

Casmora Studio respects your privacy. This policy explains what personal information we collect when you visit our website or work with us, why we collect it, how we use and protect it, who we share it with, and the choices and rights available to you. We keep our data practices deliberately narrow: we collect what we need to answer your enquiry and deliver your project, and nothing more.

1. Who This Policy Covers

This policy applies to visitors to our website, people who submit an enquiry through our contact form, and clients who engage our design services. It covers personal information we handle as the party that decides why and how that information is processed. It does not cover the separate privacy practices of third-party platforms you may reach independently of us.

2. Information You Give Us

When you complete our enquiry form, you provide your name, email address, the service you are interested in, and the details you choose to write about your project. If you go on to become a client, we may also collect a business name, a billing address, a phone number, project briefing documents, and any brand assets, files, or content you send us for the work.

Please do not send us sensitive personal information. We do not need, and do not ask for, information such as health data, government identification numbers, biometric data, or details of racial or ethnic origin, religion, political opinions, or sexual orientation. If you send such information to us anyway, you do so at your own initiative, and we will delete it when we identify it.

3. Information Collected Automatically

Like most websites, ours records certain technical information automatically when you visit. This can include your IP address, browser type and version, device type, operating system, the pages you view, the time and date of your visit, and the site you arrived from. This information is collected through our hosting platform and, where enabled, through cookies and similar technologies described in our Cookie Policy.

4. Payment Information

We do not collect or store full payment card details on our own systems. Where a project is invoiced, payments are handled through third-party payment providers who process the transaction under their own security standards and privacy terms. We receive only the confirmation of payment and the limited billing details needed for our accounting records.

5. How We Use Your Information

• To respond to your enquiry and understand what you are asking us to do.
• To prepare a proposal, scope, and quote for your project.
• To deliver the design services you have engaged us for, including communicating with you about progress, feedback, and approvals.
• To issue invoices, take payment, and keep accurate financial and tax records.
• To maintain the security, stability, and performance of our website.
• To comply with our legal obligations and to establish, exercise, or defend legal claims.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not build behavioral advertising profiles.

6. Marketing Communications

We do not add enquiry contacts to a marketing list without permission. If we ever introduce a newsletter or send occasional updates about our services, it will be on an opt-in basis, and every message will include a clear way to unsubscribe. Withdrawing consent will not affect our ability to send you the operational messages needed to run your project, such as invoices and delivery notices.

7. Legal Bases for Processing

Where the General Data Protection Regulation or similar law applies to you, we rely on the following legal bases: contract, where processing is necessary to prepare or perform an agreement with you; legitimate interests, where we process limited data to run and secure our business and respond to enquiries, balanced against your rights; legal obligation, where retention or disclosure is required by law; and consent, where you have opted in, for example to non-essential cookies or marketing.

8. Who We Share Information With

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these limited circumstances:

• Service providers. Our website platform and hosting provider, our design and collaboration tools such as Figma and Canva, our email provider, our payment processor, and our accounting software. Each processes data on our behalf and under contract.
• Professional advisers. Accountants or legal advisers where necessary and strictly on a confidential basis.
• Legal and safety. Where disclosure is required by law, court order, or a valid request from a public authority, or where it is necessary to protect our rights, safety, or property.
• Business transfer. If our business is reorganized, merged, or acquired, information may transfer as part of that transaction, subject to this policy.

9. International Transfers

We are based in the United States, and the service providers we use may store or process data in the United States or other countries. If you are located outside the United States, your information will be transferred to and processed in a country whose data protection laws may differ from those of your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect that transfer.

10. How Long We Keep Information

We keep personal information only for as long as it serves the purpose it was collected for. In practice this means enquiries that do not turn into projects are deleted within twelve months; project communications and briefs are retained for the duration of the engagement and for a reasonable period afterwards in case you return for follow-up work; and invoices and financial records are kept for as long as tax and accounting law requires, typically seven years. Retention of the design files themselves is described in our Client Content and Materials Policy.

11. How We Protect Information

We use reasonable technical and organizational measures appropriate to the size of our studio, including encrypted connections to our website, access controls on the tools we use, strong authentication on our accounts, and limiting access to client information to the people who need it to do the work. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any relevant authority where the law requires it.

12. Your Rights

Depending on where you live, you may have some or all of the following rights:

• Access. To ask what personal information we hold about you and to receive a copy.
• Correction. To have inaccurate or incomplete information corrected.
• Deletion. To ask us to delete your information, where we have no overriding legal reason to retain it.
• Portability. To receive certain information in a structured, commonly used format.
• Objection and restriction. To object to, or ask us to limit, certain processing.
• Withdraw consent. Where we rely on consent, to withdraw it at any time, without affecting processing already carried out.
• Non-discrimination. To exercise these rights without receiving a lesser service or a different price.

To exercise any of these rights, contact us using the details at the end of this page. We will verify your identity before acting on a request, and we will respond within the time frame required by applicable law. If you believe we have not handled your information properly, you may also lodge a complaint with your local data protection authority.

13. California Residents

If you are a California resident, you have the rights to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. As stated above, Casmora Studio does not sell personal information and does not share it for cross-context behavioral advertising, so there is no opt-out to exercise. The categories of information we collect, the purposes for collection, and the categories of recipients are described in sections 2 to 8 above.

14. Children

Our website and services are directed at businesses and adults. We do not knowingly collect personal information from anyone under the age of sixteen. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Third-Party Platforms and Links

Our work may involve platforms operated by others, and our website or communications may reference them. We are not responsible for the privacy practices or content of third parties. We encourage you to read the privacy policy of any third-party platform you use.

16. Do Not Track and Global Privacy Control

Some browsers transmit a "Do Not Track" signal or a Global Privacy Control preference. Because we do not track visitors across third-party websites and do not sell personal information, these signals do not change how we operate. Where the law requires us to honor a Global Privacy Control signal, we do so.

17. Changes to This Policy

We may update this policy to reflect changes in our practices, the tools we use, or the law. The current version is always published on this page, and the "Last updated" date at the top will change whenever we revise it. If we make a material change to how we use your information, we will take reasonable steps to notify you.