Privacy Policy

01Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

02Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Submit a workshop qualification form (name, email, company, role, team size, situation, timing, and the problem you describe)
• Submit a custom project inquiry (name, email, company, role, project type, timing, and the project you describe)
• Write to us directly by email

There are no public visitor accounts on this website. Sign-in, content authoring, and file uploads are limited to studio staff administering the site.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referring website addresses

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website. You can control cookie preferences through our cookie consent banner, and change them later via Footer → Privacy settings. For more information, see the Cookie Policy section below.

03How We Use Your Information

We use the information we collect for the following purposes:

• Inquiry Handling: To read, assess, and reply to workshop and project inquiries
• Communication: To respond to your inquiry and follow up on next steps
• Security: To protect against unauthorized access and maintain data security
• Analytics: To understand how users interact with our website (only with your consent)
• Legal Compliance: To comply with applicable laws and regulations

04How We Store and Process Your Data

4.1 Data Storage

When you submit an inquiry form, the details are delivered to the studio as a notification in our private Slack workspace and recorded in our database, hosted on Supabase. Storage includes:

• Database: Inquiry submissions, and the site's own content such as published articles and page sections
• Slack: A notification containing the inquiry details, visible to the studio only
• Local Storage: Cookie consent preferences stored in your browser

4.2 Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Row-level security policies in our database
• Secure authentication mechanisms
• Regular security audits and updates
• CSRF protection for form submissions

4.3 Data Retention

We retain inquiry submissions only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. You can ask us to delete your inquiry and the personal information in it at any time by emailing us at the address in the Contact section; we will remove it from our database and, where still possible, from the Slack notification.

05Third-Party Services

We use the following third-party services to operate our website:

• Supabase: For database hosting, site content, and administrator authentication. See Supabase Privacy Policy
• Slack: For delivering inquiry notifications to the studio. See Slack Privacy Policy
• Amplitude (analytics consent category): Product analytics and session replay, used to understand how the site is used. The Amplitude script is not requested or initialized until you grant analytics consent. See Amplitude Privacy Policy
• LinkedIn Insight (marketing consent category): Marketing attribution, used to measure which campaigns bring visitors to the site. The LinkedIn Insight tag is not requested or initialized until you grant marketing consent. See LinkedIn Privacy Policy

These third-party service providers have their own privacy policies addressing how they use such information.

06Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights:

• Right to Access: You can request a copy of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data
• Right to Data Portability: You can request transfer of your data to another service
• Right to Object: You can object to our processing of your personal data
• Right to Withdraw Consent: You can withdraw consent for data processing at any time — reopen Privacy settings from the footer of any page
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority

To exercise any of these rights, please contact us using the information provided in the Contact section below.

07Cookie Policy

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies to improve your browsing experience.

7.2 Types of Cookies We Use

• Necessary Cookies: Essential for website functionality (cannot be disabled)
• Analytics Cookies: Amplitude product analytics and session replay, used to understand how visitors use the site. Loads only after you grant analytics consent.
• Marketing Cookies: LinkedIn Insight, used for marketing attribution. Loads only after you grant marketing consent.

7.3 Managing Cookies

You can manage your cookie preferences through the consent banner that appears on your first visit. Your choice is stored for six months, after which the banner returns. To change or withdraw consent at any time, use the Privacy settings control in the footer of any page — withdrawing a category stops the corresponding service from loading again. You can also control cookies through your browser settings.

08Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers who assist in operating our website (e.g., Supabase, Slack)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly consent to sharing your information

09International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country where data protection laws may differ. By using our website, you consent to the transfer of your information to these locations. We ensure appropriate safeguards are in place to protect your personal data.

10Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

11Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the revision date at the top. You are advised to review this Privacy Policy periodically for any changes.

12Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: