Privacy policy
Last updated: 3 October 2026
In short: we only collect what you send us, we use it to reply and to work with you, we never sell it, and you can ask us to delete it at any time.
1. Who is responsible for your data
The data controller is Miguel Ameller, trading as OTAU, a sole trader based in the United Kingdom.
- Address: [Business address for correspondence]
- Email: info@otaustudio.com
2. What we collect
- When you start a project or use the contact form: your email address (the only required field), and if you choose to give them, your name, your message and your answers about the project (type of work, sector, markets, timings and similar).
- Where you came from, only if you accept measurement cookies: the first page you visited, the site that sent you and any campaign tags in the link. It's sent to us only if you submit a form.
- When you email us: your address and whatever you include in the message.
- How the site is used, only if you accept analytics cookies: pages visited, device and browser type, approximate location (country or city) and similar data, through Google Analytics. Google Analytics does not store your IP address.
We don't ask for sensitive data. Please don't include any in your messages.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Reply to your enquiry and send you the brief, the estimate and our proposal | Steps taken at your request before a contract (Art. 6(1)(b) GDPR) |
| Run the project if we work together | Performance of a contract (Art. 6(1)(b)) |
| Know how you found us and measure how the site is used | Your consent, which you can withdraw at any time (Art. 6(1)(a)) |
| Keep invoices and accounting records | Legal obligation (Art. 6(1)(c)) |
We don't send newsletters or marketing emails unless you've asked for them.
4. Automatic estimate
When you complete the brief, the email you receive includes a price range calculated automatically from your answers. It's only a guide: it has no legal or similar effect on you, and every proposal is prepared and reviewed by a person.
5. Who we share it with
We never sell your data. We share it only with the providers we need to run the studio, who process it on our behalf and under contract:
- Netlify, Inc. (United States): website hosting and form submissions.
- Brevo (Sendinblue SAS) (France, EU): sending the emails with your brief and our replies.
- Our email provider: where your messages and enquiries are received and stored.
- Google Ireland Ltd / Google LLC: website analytics, only if you accept analytics cookies.
We may also disclose data where the law requires it, for example to tax authorities.
6. Transfers outside the UK and EU
Netlify and Google may process data in the United States. These transfers are protected by the EU–US Data Privacy Framework and its UK Extension, and/or by standard contractual clauses approved by the European Commission and the UK (IDTA or UK Addendum).
7. How long we keep it
- Enquiries that don't become a project: up to 24 months, then deleted.
- Client and project records: for as long as we work together, and afterwards for as long as UK tax and accounting rules require (currently up to 6 years).
- Analytics data: 14 months.
8. Your rights
You can ask us at any time to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting what was done before.
Just email info@otaustudio.com. It's free, and we'll reply within one month.
9. Complaints
If you're not happy with how we handle your data, please tell us first. You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner's Office (ICO); in the EU, the authority of your country, such as the Agencia Española de Protección de Datos (AEPD) in Spain.
10. Security
The site is served over an encrypted connection (HTTPS), and access to your data is limited to the studio and the providers listed above.
11. Children
Our services are for businesses and professionals. The site is not aimed at anyone under 18, and we don't knowingly collect their data.
12. Cookies
What we store in your browser, and how to change your choice, is explained in the cookie policy.
13. Changes
If we change this policy, we'll update the date at the top. Significant changes will be made clear on the site.