Privacy policy

What we collect

We collect only what you type into a form, plus the minimum technical context needed to answer you and to keep the site running.

• Enquiry form — your name, work email address, and optionally your company, role, enquiry topic and indicative budget, together with the message you write. We also store the language you were browsing in, the page you submitted from, your browser's user-agent string and the time of submission.
• Newsletter — your email address, the language you were browsing in, the page you subscribed from and the time of subscription.
• Server logs — our hosting provider records ordinary request data, including IP address, at the network level. We do not build profiles from it.
• Preferences — a single cookie remembering your language choice. See the cookie policy.

We do not run analytics, advertising or tracking scripts on this site, and we do not buy or enrich contact data from third parties.

Why we process it, and on what basis

• To answer your enquiry — you consent by ticking the box on the form. Where the GDPR applies we also rely on our legitimate interest in responding to business enquiries, and on taking steps at your request before entering a contract.
• To send the newsletter — your consent, which you may withdraw at any time.
• To keep the site available and secure — our legitimate interest in operating and defending the service.

We do not use your data for automated decision-making or profiling.

Who processes it for us

We use a small number of processors, each under contract and each limited to the purpose below.

• Supabase — hosts the database where enquiries and newsletter subscriptions are stored. Both tables have row level security enabled with no public policies, so only our server can read them.
• Vercel — hosts and serves the website, and keeps operational logs.
• Google Fonts — the site loads web fonts from Google's servers. Requesting a font discloses your IP address and user-agent to Google. If you prefer to avoid this, block those hosts in your browser; the site remains fully readable in fallback fonts.

We do not sell personal data, and we do not share it for anyone else's marketing.

Where your data goes

Our processors operate infrastructure in more than one country, so your data may be processed outside the country you are in. Where the GDPR applies, those transfers rely on the safeguards published by each processor, including standard contractual clauses.

How long we keep it

• Enquiries — for as long as needed to answer you and, if we work together, for the life of that relationship plus any statutory retention period. Otherwise we delete them within 24 months.
• Newsletter — until you unsubscribe, after which we keep only the record needed to honour that request.
• Server logs — per our hosting provider's standard retention.

Your rights

Depending on where you are, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. You can withdraw consent at any time without affecting processing already carried out.

To exercise any of these, email us. We will respond within the period the applicable law allows. If you are unhappy with our response you may complain to your data protection authority — in Korea, the Personal Information Protection Commission; in the EU or UK, your national supervisory authority.

Security

Traffic is served over HTTPS. Form submissions are written server-side using a credential that is never exposed to your browser, and the database tables are not readable with the site's public key. No system is perfectly secure, but we design to keep the amount of data we hold small.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from them.

Changes

If we change what we collect or who processes it, we will update this page and the date shown above.