Privacy policy
Last updated: 17 October 2026
This notice explains how Draft Studio (DRAFT_) handles personal information when you visit this website or contact us about our services. For privacy questions or requests, email hello@draftstudio.co.uk.
Information we collect
If you contact us, we receive the details you provide, such as your name, email address, business name, services of interest and project description. If you become a client, we may also hold business contact details, proposals, project correspondence, contracts and billing information needed to manage our work together. Please avoid including sensitive personal information in an enquiry.
Our hosting and security providers may also process technical information such as your IP address, browser information, requested pages and security events to deliver and protect the website.
How we use your information
- To respond to enquiries and discuss potential projects.
- To prepare proposals and provide services you request.
- To operate the website, prevent spam and investigate technical or security issues.
- To manage client projects, contracts, invoicing and ongoing support.
- To maintain necessary business records and meet applicable legal obligations.
- With your consent, to measure website use through Google Analytics.
Our lawful bases
Where you ask us to take steps towards a contract with you, or we deliver that contract, we rely on contractual necessity. For general business enquiries and website security, we rely on our legitimate interests in communicating with prospective customers and operating a secure website. Where records must be kept by law, we rely on legal obligation.
For optional Google Analytics measurement, we rely on your consent. Accepting analytics is optional and is separate from contacting us or purchasing services. We do not use the enquiry form as consent to receive unrelated marketing.
Service providers
The website uses Vercel for hosting. The contact form uses Cloudflare Turnstile to check for spam and Resend to deliver your enquiry to our inbox. These providers process information needed to perform those functions. Email correspondence is also handled by the providers operating our email accounts.
For details of how these providers handle information, see the Vercel privacy notice, Cloudflare privacy notice and Resend privacy notice.
Providers may process information outside the UK. Their privacy and data-processing terms describe processing locations and applicable transfer safeguards. Contact us if you would like further information about the arrangements relevant to your enquiry.
Cookies and analytics
Essential storage is used to remember your cookie preference. Optional Google Analytics is planned for this website and only loads when it has been configured and you select “Accept”. If you reject analytics or do not make a choice, the Google Analytics script is not loaded.
When enabled with your permission, Google Analytics helps us understand visits, pages viewed, traffic sources and interactions. Google processes technical details such as browser and device information and uses cookie identifiers to distinguish visits. We do not intentionally send names, email addresses or enquiry messages to Analytics. Advertising signals and advertising personalisation are disabled in our integration.
| Name | Purpose | Duration |
|---|---|---|
| draft_cookie_consent | Essential local storage remembering your analytics choice and its date | Valid for six months, then we ask again |
| _ga and _ga_* | Optional Google Analytics visitor and session measurement, only after acceptance and when Analytics is configured | Configured to expire after six months |
You can accept or reject analytics using the cookie banner, or change your choice at any time using or the link in our footer. Withdrawing consent stops future measurement and removes Google Analytics cookies accessible to this site. It does not undo processing that took place before withdrawal. Browser controls also let you clear stored information.
For Google's handling of Analytics data and international transfers, see Google's privacy policy and Google Analytics data safeguards.
Security and external services
Cloudflare Turnstile processes browser and device signals for spam prevention when the contact form loads. Fonts are requested from Google Fonts, which means your browser connects to Google when loading them. Links to social networks take you to websites with their own privacy policies.
Keeping information secure
We use access controls and technical safeguards appropriate to the information we handle. Please contact us before sending account credentials, special-category data or confidential client datasets so we can agree a suitable transfer method. Where we process personal information on behalf of a client, the project contract and any data-processing agreement set out those responsibilities.
How long we keep information
Cookie-choice validity and Analytics cookie lifetimes are described above. Analytics reporting retention depends on the settings of our Google Analytics property; contact us for the current reporting-retention period once Analytics is enabled.
We keep enquiry information for as long as needed to respond, follow up on the project and maintain relevant correspondence. The period depends on whether an enquiry becomes a client relationship, whether there is an ongoing business need, and any legal or dispute-related record requirements. You can ask us about the retention of your particular information using the email address above.
Your rights
Depending on the circumstances, you can ask to access or correct your personal information, request its deletion, restrict its use, or receive a portable copy where that right applies. If we rely on consent for a particular activity, you can withdraw it at any time.
Your right to object: you can object to processing based on our legitimate interests. Email hello@draftstudio.co.uk to make a request or raise a concern.
You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
Changes to this notice
We will update this page if the way the website handles personal information changes. The date above shows when this notice was last updated.