This policy explains what personal data Ivory Studios ("we", "us") collects through ivorystudios.io, why we collect it, and the choices you have. Questions? Email teams@ivorystudios.io.
What we collect
- Enquiries. When you send us a brief through the contact form: your name, email, company, budget range, services of interest and message. If you arrived from an ad or campaign link, we also store the campaign parameters (such as utm_source or gclid) so we know which channel worked.
- Client portal accounts. Name, email, password (stored only as a salted hash by our authentication provider), and the project requests and updates you create.
- Bookings. If you book a call, Calendly processes your name, email and chosen time under its own privacy policy.
- Site analytics. Vercel Web Analytics and Speed Insights measure page views and performance without cookies and without tracking you across sites.
- Advertising and analytics cookies (only with your consent). If you choose "Accept" in the cookie banner, we may load Google Analytics / Google Ads and Meta Pixel to measure and improve our marketing. If you choose "Decline", none of these load.
Why we use it
- To reply to your enquiry and prepare a proposal (contract / pre-contract steps).
- To run the client portal and deliver the work you hired us for (contract).
- To keep the site secure and working (legitimate interest).
- To measure marketing performance (consent).
Who we share it with
We use a small set of service providers, each acting on our instructions: Supabase (database and authentication), Vercel (hosting and analytics), Calendly (bookings), and, only if you consent, Google and Meta (advertising measurement). We do not sell your personal data.
How long we keep it
Enquiries that do not become projects are deleted after 24 months. Client and project records are kept for as long as we work together and for the period needed to meet legal and accounting obligations.
Your rights
Depending on where you live, you can ask us to access, correct, export or delete your personal data, to restrict or object to processing, and to withdraw consent at any time (use "Cookie settings" in the footer). Email teams@ivorystudios.io and we will respond within 30 days. You may also complain to your local data-protection authority.
Security
Data is encrypted in transit (HTTPS) and access to the database is restricted by row-level security so clients can only see their own records. No system is perfectly secure; if a breach affects you we will notify you as the law requires.
Children
Our services are for businesses and are not directed at children under 16.
Changes
We will update this page when our practices change and revise the date above.