Privacy Policy.

Arctetra (“Arctetra”, “we”, “us”, or “our”) is a digital solutions studio that designs and builds apps, websites, and web platforms. This policy explains how we handle personal information collected through our website at arctetra.studio (the “Site”).

For information collected through this Site, Arctetra is the data controller. If you engage us on a project, any personal data we process inside systems we build or operate for you is governed by the agreement between us — in those cases we generally act as a processor on your behalf, not as a controller.

We keep data collection deliberately minimal. We only collect what we need to respond to you and keep the Site working.

Information you give us

When you submit our contact form, we collect the details you enter:

• First name and last name
• Email address
• Phone number (optional)
• The content of your message, including anything you choose to tell us about your project

Please don't include sensitive personal information or confidential material in a first message — a short description is enough to start a conversation.

Information collected automatically

Our hosting provider and our anti-spam provider process limited technical data when you visit the Site, such as your IP address, browser type and version, device and operating system, referring page, and the pages you request. This is used to serve the Site, keep it secure, and detect abuse.

We do not run advertising trackers, and we do not build behavioural profiles of visitors.

We use the information described above to:

• Respond to your enquiry and follow up about your project
• Prepare proposals, estimates, and scopes of work you have asked for
• Manage our client relationship and ongoing communication with you
• Protect the Site against spam, automated abuse, and security threats
• Comply with our legal, accounting, and record-keeping obligations

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We will not add you to a marketing mailing list on the basis of a contact form submission alone.

Where data protection law such as the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Steps prior to entering a contract — to answer your enquiry and discuss potential work.
• Performance of a contract — to deliver a project we have agreed to carry out.
• Legitimate interests — to run and secure our Site, prevent abuse, and maintain business records, balanced against your rights and expectations.
• Legal obligation — where we are required to retain or disclose information by law.

The Site does not use analytics, advertising, or profiling cookies. We do not display a cookie consent banner because we do not set cookies that require consent.

Our bot-protection provider, Cloudflare Turnstile, may store or read a limited amount of data in your browser and process technical signals purely to distinguish humans from automated traffic. This is strictly necessary to keep the contact form usable and is not used to track you across sites.

We use a small number of trusted providers to operate the Site. Each processes data on our instructions under its own terms and security commitments:

• Vercel — website hosting and delivery. Processes request data such as IP address and browser information.
• Cloudflare (Turnstile) — bot and spam protection on the contact form.
• HubSpot — customer relationship management. Contact form submissions are stored here so we can track and respond to your enquiry.
• Email and productivity tools — used to correspond with you and manage project work.

We may also disclose information where we are legally required to do so, or where it is necessary to establish, exercise, or defend legal claims.

Some of our providers process data outside your country, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards offered by those providers, such as standard contractual clauses or an equivalent recognised transfer mechanism.

We keep personal information only as long as it serves the purpose it was collected for:

• Enquiries that don't become projects — kept for up to 24 months, then deleted.
• Client records — kept for the duration of our engagement and afterwards for as long as needed to meet legal, contractual, tax, and accounting requirements.
• Server and security logs — kept for a short period in line with our providers' retention settings.

The Site is served over HTTPS, contact submissions are transmitted to our providers over encrypted connections, and access to systems holding personal data is limited to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we take reasonable technical and organisational measures to protect your information and review them as our systems change.

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access a copy of the information we hold about you
• Correct information that is inaccurate or incomplete
• Request deletion of your information
• Object to or restrict how we process it
• Receive your information in a portable format
• Withdraw consent, where processing is based on consent

To exercise any of these rights, email us at connect@arctetra.studio. We will respond within one month. You also have the right to complain to your local data protection authority if you believe we have handled your information improperly.

The Site is intended for businesses and professional enquiries. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

The Site may link to third-party websites and services we don't control. This policy does not apply to them, and we are not responsible for their privacy practices. We recommend reading the privacy policy of any site you visit from here.

We may update this policy as our services or legal obligations change. When we do, we will revise the “Last updated” date at the top of this page. If a change materially affects how we use your personal information, we will take reasonable steps to let you know.