Privacy policy

Last updated 27 September 2026

This policy covers https://blnkdstudio.com and the enquiries sent through it. The data controller is BLNKD Studio, a web design and development studio based in Cebu, Philippines. Questions, requests and complaints go to [email protected].

What we collect

What you type into the enquiry form

Your name, email address, company, website, the kind of project, budget and timeline ranges, and whatever you write in the message. Nothing on the form is required except your name and email — leave anything else blank if you would rather not say.

Ordinary server logs

Our host records the usual request data — IP address, time, page requested, user agent, and the country the request came from. That happens for every website on the internet and is what makes it possible to block abuse.

Analytics and measurement

This site loads Google Tag Manager, which is the container Google products are configured through. Whatever measurement tags are switched on inside it — typically Google Analytics — set cookies in your browser and send Google your IP address, the pages you view and how you arrived. The cookie policy lists what that means in practice.

We do not collect payment details through this website, we do not buy contact lists, and we do not run advertising pixels or social tracking scripts on it.

Why we are allowed to hold it

• Your enquiry: because you asked us to get in touch about work. Under UK and EU GDPR that is either a step towards a contract, or our legitimate interest in replying to someone who contacted us about our services.
• Server logs: our legitimate interest in keeping the site up and stopping abuse.
• Analytics: your consent, where the law requires it. Until a consent banner is live on this site, do not assume analytics is consent-based — see the note at the top of the cookie policy, which says plainly where we currently stand.
• Keeping your enquiry after we have replied: our legitimate interest in having a record of who we have spoken to and what was discussed. You can ask us to delete it at any time and we will.

Who else touches it

We keep the list of suppliers short on purpose. Each of these is a processor acting on our instructions:

Cloudflare

Hosts and serves the site, and filters abusive traffic. It sees the request data described above.

Resend

Delivers your enquiry to our inbox as an email. It handles the contents of the form on the way.

Google Workspace

Our email. Once your enquiry arrives, it sits in our mailbox like any other email.

Google (Tag Manager and Analytics)

Measures how the site is used. It receives your IP address and browsing activity on this site, and it is a US company that processes data globally.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not hand it to anyone else unless the law requires it.

Where it goes

We are based in the Philippines and our suppliers are largely US companies, so if you are in the UK, the EU or Australia your enquiry leaves your country. Where UK or EU transfer rules apply we rely on the standard contractual clauses in our suppliers' data processing terms. If that matters to your organisation, ask us and we will send you what we have on file for each supplier.

How long we keep it

• Enquiries that do not turn into work: up to 24 months, then deleted.
• Enquiries that do turn into work: for the life of the project and then as long as we need them for tax, accounting and any dispute — usually six years from the last invoice.
• Server logs: as long as our host keeps them, which is a matter of days to weeks, not years.

What you can ask us to do

Wherever you live, you can email us and ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We will do it within 30 days and we will not charge you or make it awkward.

• UK and EU: you have the rights in the UK and EU GDPR — access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office.
• California: you can ask what we collected, ask for it to be deleted or corrected, and you will not be treated differently for asking. We do not sell or share personal information, so there is nothing to opt out of.
• Australia: you can ask for access and correction under the Australian Privacy Principles, and complain to the Office of the Australian Information Commissioner if we handle it badly.

Security, honestly stated

The site is served over HTTPS, the enquiry form is rate-limited and checked for automated submissions, and access to our email is protected by two-factor authentication. No one can promise a system is unbreakable, and we are not going to. If something happens that puts your data at risk, we will tell you and the relevant regulator as quickly as we can.

Children

This is a business-to-business studio site. It is not aimed at children and we do not knowingly collect anything from them.

Changes

If we change how any of this works, we change this page and update the date at the top before the change goes live. Material changes are flagged here rather than quietly slipped in. Anything you want clarified, email [email protected].

Anything here you want explained in plain terms, email [email protected] and a person will answer.