Epigrams Platforms: Website privacy policy

Epigrams Platform Ltd, trading as Epigrams Platforms, is the controller for this website. The studio is based in Lagos, Nigeria and builds products from Lagos and London.

For privacy questions or requests, contact hello@epigrams.co.uk.

When you send an enquiry, we receive your name, email address, message, selected product and any optional referral source or project details you provide. We use them to respond and manage the conversation. An enquiry is not a newsletter subscription.

The guided brief keeps your answers in the page's memory. It does not send them to an AI service or automatically store them on our servers. You choose whether to copy, save or submit the brief. Avoid passwords, financial account details and personal customer records.

Optional tracking is off until you allow it in Privacy settings. Rejecting it does not prevent you from using the website or enquiry forms. Your privacy preference and theme choice can be stored in your browser so the site remembers them.

With permission, the site can record the campaign source, medium, campaign name and content identifier from tagged links, together with the landing-page path and referring hostname. These values are held in session storage and may accompany an enquiry or subscription request. Self-reported referrals are kept separate.

When configured and allowed, Google Analytics receives selected page paths and limited interaction identifiers. The website does not intentionally send form messages, email addresses, URL query strings or fragments to analytics. Enquiry, project-brief, operations and email-preference pages are excluded from this tracking.

You can withdraw optional tracking permission using Privacy settings in the footer. This stops new optional measurement and clears the campaign storage and accessible analytics cookies used by this implementation. Information already sent is not automatically recalled; contact us to discuss a request.

Subscribing is a separate choice. We record the requested email address, the version of the subscription notice and the request time. We send a confirmation link and only mark a subscription confirmed after the recipient explicitly confirms it.

Confirmation links expire after 48 hours. Expiry does not automatically delete the request record. Repeated requests are limited to help prevent unwanted email. Existing historical signup records are not treated as confirmed without a new confirmation.

You can use an unsubscribe link or email hello@epigrams.co.uk. We retain the minimum preference information needed to respect that choice and keep appropriate consent records. Our confirmation and enquiry emails disable provider open and click tracking.

Hosting and security systems may process IP addresses, browser information, request paths and timestamps to deliver the site, prevent abuse and investigate faults. Security verification is separate from optional marketing analytics.

The configured website services can include Vercel for hosting, Supabase for enquiry storage and operator authentication, Upstash for request limits, Cloudflare Turnstile for bot checks, SparkPost for transactional email and Google Analytics for optional measurement. Only services configured for a particular deployment are used.

Enquiry notifications may contain your submitted details and are sent to the studio's designated inbox. Delivery jobs and limited operator audit records help us recover from failures. Website operators must be explicitly authorised; public visitor keys do not have access to the enquiry tables.

We use enquiry information to answer you, evaluate requested work and take steps towards an agreement where relevant. We use necessary security and operational information to protect and run the website. Optional marketing measurement and newsletter subscriptions depend on your choice.

Where applicable law requires a legal basis, the relevant basis may be steps at your request before a contract, our legitimate interests in responding and protecting the service, consent for optional tracking and email marketing, or a legal obligation. We do not sell your personal information.

Retention depends on the purpose: whether an enquiry is active, whether records are needed for an agreed engagement or legal obligation, whether a subscription remains active, and what is needed to honour a withdrawal or investigate abuse. We do not promise that all records are automatically deleted on a fixed schedule.

Service-provider logs, backups, delivery records and optional analytics may have separate configured retention periods. Contact us for information about your records or a deletion request. We retain information only where there is a continuing purpose or applicable obligation.

Service providers may process information outside your country. The applicable provider arrangements and transfer safeguards depend on the service and location. Contact us for further details about the processing relevant to your request.

Depending on applicable law, you may request access, correction or deletion, object to or restrict processing, withdraw consent, or request portability where it applies. Contact hello@epigrams.co.uk; we may need to verify the requester's identity without collecting unnecessary information.

Withdrawing a newsletter subscription or optional tracking permission does not prevent necessary processing of a separate enquiry. You may also raise a concern with the relevant data-protection authority, including the Nigeria Data Protection Commission or, where applicable, the UK Information Commissioner's Office.

This notice covers the studio website, not the private notes, payment records or other information you may hold inside a linked product. The synthetic demonstration does not accept uploads or connect to financial accounts.

The studio website is not directed at children and we do not knowingly seek their personal information. No system can guarantee absolute security. We update this notice when the website's processing changes and display the effective date above.