1. Scope of this policy
This policy applies to project enquiries, general contact messages and ordinary use of the Inkall Studio website.
A confirmed operating legal entity, contact details and any jurisdiction-specific disclosures must be added during professional legal review before this template is used in production.
2. Information you provide
When you submit a project brief, we may collect your full name, work email, company, website, country, project type, project description, problem to solve, timeline, budget range and preferred contact method.
When you use the general contact form, we may collect your name, email address and message. You decide what information to include, but you should not submit passwords, private keys or unnecessary sensitive personal information.
The first release of this website does not accept file uploads.
3. Technical and source information
The website may record the source URL, referrer, UTM campaign values, locale, submission timestamps and limited technical or security events needed to operate the site and prevent abuse.
Hosting, rate-limiting and anti-spam services may process information such as an IP address, browser request or verification outcome. The production policy must identify the services that are actually enabled.
4. How information may be used
Information may be used to review and respond to an enquiry, generate a project reference, maintain an internal enquiry record, arrange a discussion by email, send transactional confirmation messages, protect the website from abuse and maintain service reliability.
Information may also be processed where reasonably necessary to establish, exercise or defend legal rights or meet an applicable legal obligation.
5. Legal bases
The legal basis for processing depends on the context and applicable law. It may include your consent, steps requested before entering a contract, legitimate interests in responding to business enquiries and operating a secure website, or compliance with a legal obligation.
The appropriate legal bases must be confirmed for the operating entity and target markets during professional review.
6. Service providers and disclosures
The website may rely on service providers for hosting, database and authentication services, transactional email, security and anti-spam checks. Optional analytics or advertising services may be used only when they are configured and the required consent has been obtained.
Providers should receive only the information reasonably needed to perform their role. The production policy must name the providers that are actually used and reflect their current terms and processing locations.
Information may also be disclosed where required by law, to protect legal rights or in connection with a properly reviewed business transfer.
8. Retention
Information should be kept only for as long as reasonably needed for the purpose for which it was collected, including enquiry management, security, record-keeping and applicable legal requirements.
A specific retention schedule and deletion process must be approved before production use. Records may be retained longer where required to preserve legal rights or meet a legal obligation.
9. International processing
Website and email providers may process information in countries other than your own. The production policy must describe the relevant hosting regions and safeguards after the final provider configuration and operating jurisdiction are confirmed.
10. Security
Reasonable technical and organisational measures should be used to protect submitted information, including access controls, secure configuration, server-side validation and protected credentials.
No internet transmission or storage method can be guaranteed to be completely secure. Do not send secrets or highly sensitive material through a public enquiry form.
11. Project information and confidentiality
An initial enquiry does not by itself create a confidential client relationship. An NDA can be arranged when appropriate before sensitive project information is exchanged.
Any confidentiality, data handling or security requirements for a project should be recorded in the signed project agreement.
12. Your choices and rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection or a portable copy of personal information, and to withdraw consent where processing relies on consent.
Use the contact method on the Contact page to make a request. Identity may need to be verified before a request is completed, and some information may need to be retained where lawfully required.
13. Children
This business-to-business website is not intended for children, and the enquiry forms should not be used to submit information about a child.
14. Changes to this policy
This policy may be updated when the website, provider configuration or legal requirements change. The published page should show an accurate effective or last-updated date.
15. Contact
For a privacy question or request, use the email address configured on the Contact page. Do not publish this template until a real contact address and the required operator details have been added.
Required production review
Before this template is used as a final policy, a qualified legal professional should confirm:
- Operating legal entity or controller identity
- Privacy contact email and any legally required postal address
- Effective and last-updated dates
- Actual hosting, database, email and anti-spam providers
- Hosting regions and international-transfer safeguards
- Lawful bases for target markets
- Retention and deletion schedule
- Actual cookie and tracking inventory
- Process for privacy requests