Privacy Policy

Data controller and contact details

Controller identity

Patryk Kotwicki and Molly Swain, trading as MPSK Studio

Postal address

49 Jamaica Street, Liverpool, L1 0AH, United Kingdom

Privacy contact

enquiries@mpskstudio.com

Information we collect

The enquiry form collects your name, email address, company or brand, service interest, project summary, indicative budget and timing. The hosting platform may also process limited request and device information, such as an IP address, browser details and security events. A short-lived, hashed network identifier is used to limit abusive form submissions.

Why we use it and our lawful basis

We use the information to understand your enquiry, decide who at MPSK should respond, reply to you, prepare a scope or quotation where requested, and protect the form from abuse. Where you ask us to take steps before entering a contract, the lawful basis is taking those pre-contractual steps. For service improvement, security and abuse prevention, we rely on our legitimate interests, balanced against your rights.

Sending an enquiry does not subscribe you to marketing. We do not sell personal data.

Service providers

Vercel hosts and secures the website. Resend delivers enquiry emails. Sanity provides the website content system but does not receive enquiry contents through this form. Cloudinary delivers the approved hero media. These providers process limited data as needed to provide their services and may use infrastructure outside the UK; where required, transfers are governed by appropriate contractual safeguards.

Retention and security

Enquiry correspondence is normally kept for up to 12 months after the last meaningful contact, unless a client relationship begins or a longer period is needed for legal, accounting or dispute purposes. Rate-limit records expire after approximately ten minutes; duplicate-delivery keys expire after approximately 24 hours. Providers may retain operational records under their own documented retention schedules.

We limit access to people who need the information, use encrypted connections, keep the Resend API key on the server, validate submissions and apply anti-abuse controls. No internet service can promise absolute security, but we use proportionate technical and organisational safeguards.

Your rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability, or object to its use. You can make an access, correction or deletion request using the privacy contact above. We may need to confirm your identity before acting on a request.

If you are unhappy with how your information is handled, contact us first so we can investigate. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

Automated decisions and marketing

We do not use enquiry information for automated decision-making or profiling. Routing the message to Patryk, Molly or both is a simple service-interest rule and does not make a decision about you. Enquiry details are not added to a marketing list.