Privacy Policy

1. Who We Are

Moji Studio is a UK-based digital studio providing website design and development, branding, technical SEO, automation, maintenance, and related digital services. This policy explains how we collect, use, and protect personal data when you use our website or contact us.

2. Personal Data We Collect

2.1 Data You Provide Directly

• Name
• Email address
• Company name, where provided
• Message content and project requirements
• Any other information you send to us voluntarily

2.2 Technical and Usage Data

• Browser, device, and page usage data collected through Google Analytics, if you consent
• Cookie consent choices stored in your browser
• Basic anti-spam and abuse-prevention signals connected to form submissions

3. How We Use Personal Data

• To respond to enquiries and prepare proposals
• To provide services and manage client work
• To maintain website security and reduce spam or misuse
• To understand website usage and improve the site, where analytics consent is given
• To keep records needed for contractual, administrative, and legal purposes

4. Lawful Bases

We rely on one or more of the following lawful bases under UK GDPR, and where relevant EU GDPR:

• Consent: for optional analytics.
• Steps before contract / contract: to respond to enquiries and deliver services.
• Legal obligation: where we must keep records or respond to lawful requests.
• Legitimate interests: to run, secure, improve, and administer our business and website.

5. Who We Share Data With

We do not sell your personal data. We may share data with trusted providers where needed to operate the website or deliver services, including:

• Hosting, infrastructure, and security providers
• Analytics providers, including Google Analytics, where you consent
• Communication, form handling, and email delivery providers
• Professional advisers, payment providers, or authorities where legally required

6. International Transfers

Some providers we use may process data outside the United Kingdom. Where this happens, we use appropriate safeguards such as provider contractual commitments, adequacy decisions, or other recognized transfer mechanisms where required.

7. Retention

• Enquiry data is kept for as long as needed to handle your enquiry and reasonable follow-up.
• Where an enquiry becomes a project, relevant records may be kept for longer to manage the work and meet legal or accounting obligations.
• Cookie consent preferences remain in your browser until you update them or clear browser storage.
• Analytics data is retained according to the configuration of our analytics tools.

8. Security

We use reasonable technical and organizational measures to protect personal data. No website, provider, or method of internet transmission is completely secure, so we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you may have the right to request access, correction, deletion, restriction, objection, portability, and withdrawal of consent where consent is the lawful basis.

You can exercise your rights by contacting us using the details below. We may need to verify your identity before responding.

10. Cookies and Analytics

We use limited browser storage for cookie preferences and optional analytics technology. For details of the technologies in use and how to manage them, see our Cookie Policy.

11. Children

Our website and services are not directed at children. We do not knowingly collect personal data from children through this website.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our services, website, providers, or legal obligations. The date at the top of this page shows the latest revision.

13. Contact

For privacy questions or rights requests, contact:

14. Complaints

If you are unhappy with how we handle personal data, you can contact us first and you also have the right to complain to the Information Commissioner's Office in the UK:ico.org.uk.