Privacy Policy

1. Who We Are

Mise Studio ("we", "us", "our") is a web design studio operating at [TODO: Your registered business name and address]. We can be contacted at [TODO: your@email.com].

This Privacy Policy explains how we collect, use, and protect personal data when you visit misestudio.com or contact us through this website.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, phone number, restaurant name — when you submit the contact form.
• Communication data — the contents of messages you send us via the contact form or email.
• Usage data — anonymised analytics about how visitors use this website (pages visited, session duration, device type). [TODO: Specify which analytics tool — e.g. Plausible, Fathom, or Google Analytics].
• Email marketing data — your email address if you opt in to receive our free checklist or newsletter. [TODO: Add only if applicable].

3. Why We Collect It (Legal Basis)

We process personal data on the following legal bases under GDPR:

• Legitimate interest — to respond to enquiries you initiate and to manage our client relationships.
• Consent — for email marketing communications (you may unsubscribe at any time).
• Contractual necessity — to fulfil services you engage us for.

4. How We Use Your Data

We use collected data to:

• Respond to your enquiries and messages
• Provide website design and development services
• Send project-related communications
• Improve our website and service offering
• Send marketing emails where you have given consent

5. Who We Share Data With

We do not sell your personal data. We may share data with third-party service providers who help us operate the business, including:

• Hosting and infrastructure — [TODO: Cloudflare Pages]
• Email delivery — [TODO: Add provider name, e.g. Resend]
• Analytics — [TODO: Add provider name]

All processors are bound by GDPR-compliant data processing agreements.

6. How Long We Keep Data

We retain personal data only for as long as necessary. Contact form enquiries are retained for up to 24 months unless a client relationship is established, in which case data is kept for the duration of the project plus a reasonable period thereafter for legal and business purposes. You may request deletion at any time.

7. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent at any time (for consent-based processing)

To exercise any of these rights, contact us at [TODO: your@email.com].

8. Cookies

This website may use essential cookies required for basic functionality. We do not use tracking or advertising cookies without your consent. [TODO: Add a cookie consent banner if you use analytics cookies.]

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Data is transmitted over HTTPS and processed on secure infrastructure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with an updated "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance.