Privacy policy

Who we are

Proxima Studio is an independent web design studio based in London, run by one person, Neda Yavari. Proxima is the data controller for the information described on this page, which means we decide what is collected and what happens to it.

If you have a question about anything here, or you want us to do something with your data, email hello@proximastudio.co.uk and it will reach Neda directly.

What we collect, and when

Nothing is collected simply by reading the site. There is no sign-up, no account, no profile. Information reaches us only when you choose to send it.

When you submit the contact form, we receive your name, your email address, your company name if you give one, and your message.

When you book a discovery call, we receive your name, email address, phone number, company name, the type of project, the budget range you picked, your message, the time slot you chose and your time zone.

Alongside either submission we also record three technical details: the IP address the request came from, your browser's user agent string, and the page you submitted from. These exist so we can block spam, tell a real enquiry from an automated one, and know which page brought you to us. They are not used to build a profile of you.

If you email us directly, we hold that email and any reply, the same way anyone holds their inbox.

Why we are allowed to hold it

Under UK data protection law, every use of personal data needs a lawful basis. Ours are straightforward:

• Taking steps at your request before entering into a contract. You asked us about a project or booked a call, so we need your details to answer you.
• Legitimate interests. Keeping a record of enquiries, and keeping the forms free of spam, is a reasonable thing for a small business to do and does not override your privacy.
• Legal obligation. Once you become a client, we have to keep certain records for tax and accounting purposes.

Cookies, analytics and tracking

This site sets no cookies. It runs no analytics, no tracking pixels, no advertising tags, no session recording and no third-party scripts that follow you anywhere. That is why you have not been asked to accept a cookie banner: there is nothing to accept.

If that ever changes, this page changes with it, and anything requiring your consent will ask for it first.

Who else handles your information

Running a website means using a handful of specialist providers. They act on our instructions and are not allowed to use your information for their own purposes.

• Vercel, which hosts the site and serves every page. Its servers keep short-lived request logs.
• Supabase, which stores enquiries and bookings in a private database, so nothing is lost if an email fails to send.
• Resend, which delivers the notification email that tells us an enquiry has arrived.
• Cal.com, which manages the discovery call calendar and sends your booking confirmation.

Some of these providers operate outside the UK. Where your information is transferred abroad, it is covered by the safeguards UK data protection law requires, such as the UK International Data Transfer Agreement or the UK extension to the EU to US Data Privacy Framework.

We do not sell your information, and we never share it with advertisers or data brokers.

How long we keep it

Enquiries and bookings that do not turn into a project are deleted within 24 months of your last contact with us.

If we work together, we keep the project records and the correspondence for 6 years after the engagement ends, which is the period UK tax and contract law expects.

You can ask us to delete your information sooner, and unless we are legally required to keep a particular record, we will.

Keeping it secure

The site is served only over HTTPS. The enquiry database is private, with no public read or write access, and is reachable only by the site's own server code. The keys that reach it are never sent to your browser.

No system is perfect, and we will not pretend otherwise. If a breach ever affected your information in a way that posed a risk to you, we would tell you.

Your rights

UK GDPR gives you real, enforceable rights over your information. You can ask us to:

• Give you a copy of everything we hold about you.
• Correct anything that is wrong or out of date.
• Delete it.
• Restrict what we do with it, or object to us holding it at all.
• Send it to you, or to someone else, in a portable format.

Email hello@proximastudio.co.uk and we will respond within one month. There is no charge.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. There is no archive of previous versions; if a change matters to an enquiry you have already sent, we will tell you directly.