Privacy Policy

Last updated: March 2026

1. Information we collect

We collect information you provide directly: name, email address, company name, and project details when you contact us via our website or enter into a client engagement. We also collect standard server logs (IP address, browser type, pages visited) to monitor site performance.

2. How we use your information

We use the information we collect to respond to enquiries, deliver contracted services, send project updates, and improve our website. We do not sell, trade, or rent your personal information to third parties. We may share anonymised, aggregate data for analytics purposes.

3. Cookies

Our website uses essential cookies required for site functionality. We use analytics cookies from [your analytics provider] to understand how visitors use our site. You can disable cookies in your browser settings, though this may affect site functionality.

4. Data retention

We retain client project data for the duration of our engagement plus six years for legal and tax purposes. Enquiry data (contact form submissions) is retained for 12 months. You may request deletion of your data at any time by emailing hello@motif.io.

Under the UK GDPR and EU GDPR you have the following rights: (1) Right of access — obtain a copy of your personal data and information about how we process it. (2) Right to rectification — correct inaccurate or incomplete data. (3) Right to erasure ("right to be forgotten") — request deletion where data is no longer necessary or unlawfully processed. (4) Right to restriction of processing — limit how we use your data while a complaint is resolved. (5) Right to data portability — receive your data in a structured, machine-readable format. (6) Right to object — object to processing based on legitimate interests or for direct marketing. (7) Rights related to automated decision-making — not be subject to solely automated decisions that produce significant effects (Art. 22 UK GDPR / GDPR), and to request human review. (8) Right to lodge a complaint — complain to the Information Commissioner's Office (ICO) at ico.org.uk or your local EU supervisory authority. To exercise any of these rights, contact us at hello@motif.io.

5a. Your rights (California — CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA): (1) Right to know — request disclosure of the categories and specific pieces of personal information we have collected, the sources, our business purpose, and the categories of third parties with whom we share it. (2) Right to delete — request deletion of personal information we have collected, subject to certain exceptions. (3) Right to correct — request correction of inaccurate personal information. (4) Right to opt out of sale or sharing — we do not sell personal information. If this changes, you will be able to opt out via our Do Not Sell or Share My Info page. (5) Right to limit use of sensitive personal information — request that we limit use of sensitive personal information to the purposes permitted under CPRA. (6) Right to non-discrimination — we will not discriminate against you for exercising any of these rights. To exercise California rights, contact us at hello@motif.io or visit our /do-not-sell page.

5b. Do Not Track and Global Privacy Control

We recognise the Global Privacy Control (GPC) signal. If your browser or extension sends a GPC signal, we treat it as a valid opt-out of sale and sharing of personal information for California residents. We do not currently respond to browser-level Do Not Track (DNT) signals, as no universal standard has been adopted. For a more precise opt-out, use the GPC signal or visit our /do-not-sell page.

6. Data security

We implement industry-standard security measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. Client project files are stored on encrypted infrastructure with role-based access.

7. Third-party services

We use third-party services that may process your data: [your analytics provider], [your hosting provider], and [your payments provider]. Replace this list with the actual processors YOUR studio uses, with links to each processor's privacy policy, before publishing.

8. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. For active clients, material changes will be communicated via email.

9. Contact

For privacy-related enquiries, contact our data protection lead at hello@motif.io or write to: Motif Studio Ltd, REPLACE WITH YOUR REGISTERED ADDRESS, REPLACE WITH YOUR JURISDICTION.

Questions? Contact us at privacy@motif.io