Privacy Policy

Who we are

Moonshot Studio (“we”, “us”) is a design and development studio. This policy explains what personal information we handle when you visit this website or get in touch with us, why, and the choices you have.

If you have a question about this policy or your information, contact us at our email address.

What we collect and why

When you contact us. If you send us a message or an enquiry, we receive what you choose to include: usually your name, email address, company or project name and what the business does; the type of project, the services you are interested in, how you would like it built, when you would like to start and any deadline; links to your current website or a brief; how you heard about us; and your message. We use this to reply, discuss your project, prepare a proposal and, if we work together, run the project. Our legal basis is our legitimate interest in responding to enquiries and, where you ask for a proposal, taking steps at your request before a contract.

Technical data. When you visit, our hosting provider automatically records standard server logs, such as your IP address, browser and device type, the pages requested and the time. This is needed to deliver the website, keep it secure and prevent abuse. We do not use it to identify individual visitors or to build profiles. Our legal basis is our legitimate interest in running and securing the site.

What we do not collect. This website has no accounts, no payments, no analytics, no advertising and no tracking of any kind.

How the contact form works

When you press send on our contact page, what you entered in the form is sent securely to our website’s server and delivered to our inbox as an email through Resend, our email delivery provider. Your email address is set as the reply address so we can answer you directly. The website does not keep a separate copy or database of enquiries; they live in our inbox. The form also includes a hidden field and a timing check to filter out spam bots, which do not involve any extra information about you.

Cookies and similar technologies

We do not set cookies. The only thing this website stores on your device is a small note in your browser’s session storage (named ms-visited) that records that the intro animation has already played, so it can be shorter if you open another page. It is not used to identify you and is deleted when you close the tab. Because we use no cookies and no tracking, we do not show a cookie banner.

Who we share information with

We do not sell your information, and we do not share it for advertising. We only share it with people who help us run the site and our business, and who may only use it for that purpose:

• our hosting provider (Vercel Inc.), which serves this website and keeps standard server logs;
• Resend (Resend Inc.), which delivers contact-form messages to our inbox;
• our email provider (Google), which stores the messages you send us;
• professional advisers, or public authorities where the law requires it.

Our work pages link to other websites, such as the sites of the projects we have built. Those sites have their own privacy practices, which we do not control.

International transfers

Our hosting, email delivery and email providers may process information in countries other than your own, including the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses or similar protections offered by those providers.

How long we keep it

We keep enquiries for as long as we need to deal with your enquiry, and for up to two years after our last contact if no project follows. If we work together, we keep project records for as long as the project and the legal, tax and accounting rules that apply to us require. Server logs are kept by our hosting provider for a short period according to its own policy.

Your rights

Depending on where you live, data protection laws (such as the EU and UK GDPR) may give you the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct it or delete it;
• ask us to restrict how we use it, or object to our using it;
• ask for it in a portable format;
• withdraw consent, where we rely on it;
• complain to your local data protection authority.

To use any of these rights, email our email address. We will reply within one month.

Security

This website is served over HTTPS, and we keep the information you send us in systems with restricted access. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

Children

This website is not aimed at children, and we do not knowingly collect personal information from anyone under 16.

Changes to this policy

If we change how we handle personal information, for example by adding analytics, we will update this page and the date at the top. If a change needs your consent, we will ask for it first.