Start a project
Legal

Privacy Policy

Last updated: 29 June 2026

nuvisco Digital Craft Studio ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or contact us about a project.

nuvisco Digital Craft Studio is the data controller responsible for your personal data. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

nuvisco Digital Craft Studio is a digital design and development studio based in the United Kingdom. You can contact us at hello@nuvisco.studio

2. Data we collect

We collect the following personal data when you choose to provide it:

  • Contact form submissions — your name, email address, and project details when you use our contact form.
  • Email correspondence — the content of any emails you send us directly.

We do not collect data through cookies for analytics, advertising, or user tracking. If this changes, we will update this policy and provide appropriate notice.

3. Why we collect your data

We process your personal data for the following purposes:

  • To respond to your enquiry and discuss potential projects (legitimate interest).
  • To provide quotes, proposals, and deliver agreed services (contract performance).
  • To maintain records of communications for project management (legitimate interest).

4. Legal basis for processing

Under UK GDPR Article 6, we rely on the following legal bases:

  • Legal obligation — to comply with applicable legal, tax, and accounting requirements, including the retention of records for regulatory purposes.
  • Legitimate interest — to respond to enquiries, communicate with prospective clients, and manage and improve our business operations in a reasonable and proportionate way.
  • Contract performance — to process and use personal data where necessary to provide services you have requested or commissioned.

5. How long we keep your data

We retain enquiry data for up to 12 months after your last communication if no project is commissioned. For commissioned projects, we retain records for 6 years after project completion for tax and legal record-keeping purposes, after which they are securely deleted.

6. Who we share your data with

We do not sell or rent your personal data. We may share it with the following third-party processors, all of which are GDPR-compliant:

  • Formspree — our contact form handler, based in the United States and compliant with the EU-US Data Privacy Framework.
  • Google Fonts — font delivery service. Google Fonts is loaded from Google servers, which process your IP address when fonts are requested.
  • Cloudflare (cdnjs) and unpkg — content delivery networks serving our JavaScript libraries. These services may receive visitors' IP addresses and browser information as part of delivering website assets.

We will never share your data with any other third party unless required to do so by law.

7. International transfers

Some of our processors (Formspree, Google Fonts) are based outside the UK. We only use processors that provide appropriate safeguards, including the UK Extension to the EU-US Data Privacy Framework or Standard Contractual Clauses where applicable, to ensure your data is protected to UK GDPR standards.

8. Your rights

Under UK GDPR, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data ("right to be forgotten").
  • Right to restrict processing — request that we limit how we use your data.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interest.
  • Right to withdraw consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at hello@nuvisco.studio. We will respond within one month. We may request proof of identity before fulfilling data access requests.

9. Data security

We take appropriate technical and organisational measures to protect your data, including HTTPS encryption on our website, a Content Security Policy, and restricted access to stored data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We regularly review our technical and organisational security measures to ensure they remain appropriate.

10. Cookies

We do not intentionally use cookies for analytics or advertising. If we introduce cookies in the future (for example, for analytics), we will update this policy, provide a cookie banner, and give you the ability to opt in or out.

11. Children's privacy

Our website and services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

13. How to complain

If you have a concern about how we handle your data, we encourage you to contact us first so we can try to resolve it. Please contact us at hello@nuvisco.studio. You also have the right to complain to the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us:

← Back to home