Privacy policy

This policy explains what personal data Tecton Studio ("we", "us") collects through tecton.studio, why, how long we keep it and the choices you have. It covers this website only. Personal data we handle while working on a client project is covered by our agreement with that client.

What we collect

When you send an enquiry (on a package page or /start): your name and email address, and if you choose to give them, your company, website or LinkedIn profile, your answers about the project, when you'd like to start and anything you write in the message box.

When you book a call (on /book or at the end of the enquiry form): the time you chose, your time zone and the reference for the booking, along with the details above. If you write what you'd like to talk about, we keep that too.

Where you came from: the page you sent the form from, the website that linked you to us and any campaign tags in the link (such as utm_source). This helps us understand which work brings people to us.

When you email or message us: what you send and your contact details.

Technical data: like every website, our server records basic request information (IP address, browser type, the page requested) in short-lived logs, to keep the site running and secure. Your IP address is also used, briefly and in memory only, to stop spam and repeated submissions. It is not saved with your enquiry.

In your browser: while you fill in the enquiry form, your answers are saved in your browser's local storage so they are not lost if you leave the page. They are removed once the form is sent. We do not use advertising or analytics cookies, and we do not track you across other websites.

How we use it

• To reply to your enquiry and talk with you about your project. This is a step you asked us to take before any agreement, and it is in our legitimate interest to answer the people who contact us.
• To schedule, confirm, move or cancel the calls you book, and to send you the details by email.
• To keep the forms free of spam and abuse (legitimate interest).
• To understand, in general terms, how people find us (legitimate interest).

We do not sell your data, we do not add you to a mailing list, and we do not use it for automated decisions about you.

Google Calendar and Google Meet

When you book a call, our website creates an event in our own Google Calendar with your name and email address as the guest, usually with a Google Meet link. Google then sends you the invitation, and any updates if the call moves or is cancelled. Google processes this information under its own privacy policy (policies.google.com/privacy).

Our website connects to our Google account only, never to yours. Its access is limited to creating and managing the events for booked calls and to checking when our calendar is busy, so nobody books over another meeting. It does not see what those other events are, and it cannot read email, files or contacts.

Tecton Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

Only the service providers we need to run the website and talk with you, who handle the data on our behalf:

• Contabo hosts the website and its database on servers in Germany.
• Google provides our calendar, Google Meet and, where we use it, email.
• Our email provider delivers the confirmation and notification emails.
• Cloudflare may check form submissions for bots (Turnstile), if that protection is switched on.
• Telegram, if you choose to message us there.

We may also share information if the law requires it, or with professional advisers under a duty of confidentiality.

Where your data is kept

Our website data is stored in the European Union (Germany). Some of our providers, such as Google, may process data in other countries, including the United States. Where they do, they rely on recognised safeguards such as standard contractual clauses.

How long we keep it

• Enquiries and booked calls: up to 24 months after our last contact, unless we start working together. Client records are then kept for as long as the agreement and the law require.
• Messages marked as spam: deleted regularly.
• Server logs: a few weeks.
• Backups: overwritten after 14 days.

Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, limit how we use it, send it to you in a portable format, or stop using it. Where we rely on your consent, you can withdraw it at any time. We reply within 30 days.

Under the Nigeria Data Protection Act 2023 you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng). If you are in the UK or the European Union, you can complain to your local data protection authority, such as the ICO in the UK. We would appreciate the chance to put things right first, so please contact us.

Security

The website is served only over encrypted connections (HTTPS), the server is kept up to date and locked down, and access to enquiries is limited to our team. No system is perfectly secure, but we take reasonable care to protect your data.

Children

This website is meant for businesses and is not directed at anyone under 18.

Changes

If we change this policy, we will update it on this page with a new date.