Privacy Policy

1. What we collect

• Enquiries. When you submit the contact form we store your name, email and message.
• Where you came from. Alongside an enquiry we store basic attribution data: the page you submitted from, the referring website and any campaign parameters in the link you followed.
• Accounts. If you create an account, we store your email address and, if you provide one, your display name.

2. Why we use it

To reply to your enquiry, deliver the templates or services you asked for, and understand which channels bring people to the site. We do not sell your data and we do not use it for advertising profiles.

3. Where it is stored

Enquiries and accounts are stored in our managed database (Supabase). Enquiry notifications are delivered by email through our email provider. The website itself is hosted on Cloudflare. These providers process data on our behalf under their own security terms.

4. Security measures

• All traffic is served over HTTPS.
• Database access is restricted by row-level security rules; public visitors can only submit an enquiry, never read one.
• Admin functions require an authenticated account with an explicit admin role.
• Service credentials are held as server-side secrets and are never exposed to the browser.

5. How long we keep it

Enquiries are kept for as long as needed to handle the conversation and our business records. Account data is kept until you ask us to delete the account.

6. Your choices

You can ask us to access, correct or delete the data we hold about you by emailing sales@xdstudiolab.com. We will respond within a reasonable time.

7. Cookies

We use only the storage needed to keep you signed in. We do not run third-party advertising or cross-site tracking cookies.