Privacy Policy

1. Who We Are

Moji Studio is a UK-based digital studio providing website design and development, branding, technical SEO, automation, ongoing website care, Google Business Profile support, and related digital services.

The data controller for this website is Moji Technologies LTD, operating under the Moji Studio brand.

Moji Technologies LTD is a private limited company registered in England and Wales with company number 17181491. Registered office: 66 Paul Street, London, England, United Kingdom, EC2A 4NA.

2. Personal Data We Collect

2.1 Data you provide directly

• Name
• Email address
• Company name, where provided
• Message content, project brief, and enquiry details
• Any other information you send to us voluntarily

2.2 Technical and usage data

• Browser, device, and page usage data collected through Google Analytics, if you consent
• Cookie consent choices stored in your browser
• Basic anti-spam and abuse-prevention signals connected to form submissions

3. How We Use Personal Data

• To respond to enquiries and prepare proposals
• To provide services and manage active client work
• To operate and secure the website and contact form
• To understand site usage and improve the website, where analytics consent is given
• To keep records needed for contractual, tax, accounting, and legal purposes

4. Lawful Bases

We rely on one or more of the following lawful bases under UK GDPR and, where relevant, EU GDPR:

• Consent: for optional analytics.
• Steps before contract / contract: to handle enquiries, prepare proposals, and deliver services.
• Legal obligation: where we must keep records or respond to lawful requests.
• Legitimate interests: to run, secure, improve, and administer our website and business.

5. Named Providers and Recipients

We do not sell your personal data. We share personal data only where needed to operate the website, process enquiries, or deliver services. Providers currently used in the website and enquiry flow include:

• Cloudflare Pages for website hosting, delivery, and security.
• Cloudflare Workers for contact form processing via https://contact.mojistudio.co.uk/contact.
• MailChannels for delivery of contact form emails to our business inbox.
• Google Analytics 4 (Google) for optional website analytics, only where you consent.
• Professional advisers, payment providers, or authorities where legally required or necessary for service delivery.

6. International Transfers

Some of our providers operate international infrastructure or may process data outside the United Kingdom. Where this happens, we rely on the transfer mechanism applicable to the provider and transfer route, such as adequacy arrangements or contractual safeguards.

• Google Analytics 4: analytics processing by Google entities, using Google's applicable international transfer arrangements.
• Cloudflare Pages and Cloudflare Workers: website delivery, security, and form handling across Cloudflare infrastructure, subject to Cloudflare's contractual safeguards.
• MailChannels: transactional email delivery for contact form messages, subject to MailChannels' applicable contractual safeguards.

7. Retention

• General enquiries and unconverted leads: up to 24 months after the last substantive contact.
• Active client and project records: for the duration of the project and ordinarily for 6 years after the final invoice or project close for accounting and contractual record-keeping.
• Cookie consent preferences: until you update your choice or clear local browser storage.
• Website analytics data: up to 14 months from the last interaction in our analytics configuration.
• Operational spam and abuse-prevention signals: only for as long as needed to protect the form flow, investigate misuse, or maintain service security.

8. Security

We use reasonable technical and organisational measures to protect personal data. No website, service provider, or method of internet transmission is completely secure, so we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you may have the right to request access, correction, deletion, restriction, objection, portability, and withdrawal of consent where consent is the lawful basis.

You can exercise your rights by contacting us using the details below. We may need to verify your identity before responding.

10. Cookies and Analytics

We use local browser storage for cookie preferences and optional Google Analytics for website measurement. For more detail on the technologies in use and how to manage them, see our Cookie Policy.

11. Children

Our website and services are not directed at children. We do not knowingly collect personal data from children through this website.

12. Changes to This Policy

We may update this policy to reflect changes in our services, website tools, providers, or legal obligations. The date at the top of this page shows the latest revision.

13. Contact

For privacy questions or rights requests, contact:

14. Complaints

If you are unhappy with how we handle personal data, you can contact us first and you also have the right to complain to the Information Commissioner's Office in the UK:ico.org.uk.