Privacy Policy

Last updated: Aug 4, 2026

Basefield Studio LLC ("Basefield Studio", "we", "us") operates basefieldstudio.com. This policy explains what personal information we collect through the site, why we collect it, how long we keep it, and the choices you have.

We are the data controller for information collected through this site.

We work with clients in the United States and the United Kingdom. Where UK or EU data protection law applies to you, the rights described under Your rights apply in full.

What we collect

We collect only what a visitor actively sends us, plus optional analytics if you consent to them. We do not buy personal data, and we do not sell it.

Information you send us

  • Contact form — your name, email address, and message, plus optional website URL, budget range, and service interest. Submissions are relayed to our inbox as email through Resend; we do not run a database of form submissions. Resend processes and briefly retains message data under its own privacy policy, as our processor.
  • Booking a call — calls are scheduled through Cal.com. When you book, Cal.com collects your name, email, and any details you add, and processes them under its own privacy policy.
  • Email — if you email us directly, we hold that correspondence in our mailbox.

Information collected automatically

  • Analytics (consent-only) — Google Analytics 4 and Microsoft Clarity. These load only after you accept analytics in the consent banner. They collect usage data such as pages viewed, approximate location derived from IP address, device and browser type, referring source, and interaction events. Microsoft Clarity also records session interactions (clicks, scrolls, mouse movement) to produce heatmaps and session replays. If you decline, neither tool loads and no analytics identifiers are created.
  • Server logs — our hosting provider records standard request logs (IP address, timestamp, user agent) for security and reliability. These are not used to build a profile of you.

We do not knowingly collect information from children under 16, and the site is not directed at them.

How we use it, and our lawful bases

What we doWhyLawful basis (UK/EU GDPR)
Reply to your inquiry and discuss a possible projectYou asked us toSteps prior to entering a contract
Schedule and hold a callYou requested the callSteps prior to a contract
Deliver work under a signed agreementFulfilling our contractPerformance of a contract
Understand how the site is used and improve itAnalyticsConsent
Keep the site secure and availablePrevent abuse, diagnose faultsLegitimate interests
Keep records for tax and accountingRequired by lawLegal obligation

Where we rely on consent, you can withdraw it at any time — see the Cookie Policy — without affecting anything done before you withdrew it.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

Who we share it with

We share personal information only with service providers who process it on our behalf, and only as needed to run the studio:

ProviderPurpose
ResendDelivering contact-form submissions to our inbox
Cal.comScheduling calls
Google Analytics 4Website analytics (consent-only)
Microsoft ClaritySession analytics and heatmaps (consent-only)
Hosting providerServing the website; request logs
Email and productivity toolsCorrespondence and project delivery

We may also disclose information where we are legally required to, or to establish or defend legal claims. We do not sell personal information.

International transfers. Our providers are primarily US-based. Where personal information covered by UK or EU law is transferred outside the UK or EEA, that transfer relies on the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or an adequacy decision where one applies.

How long we keep it

  • Inquiries that do not become projects — up to 24 months from the last message, then deleted.
  • Client project records — for the life of the engagement and up to 7 years afterwards, where needed for tax, accounting, and legal claims.
  • Analytics data — retained under each provider's settings. Google Analytics 4 is configured to the shortest practical retention window; Microsoft Clarity retains session data for a limited period under its own policy.
  • Server logs — a short rolling window set by our host.

Your rights

Depending on where you live, you have some or all of the following rights:

  • Access — ask what personal information we hold about you.
  • Correction — have inaccurate information fixed.
  • Deletion — ask us to delete information we no longer need.
  • Restriction and objection — ask us to limit or stop certain processing, including processing based on legitimate interests.
  • Portability — receive information you gave us in a portable format.
  • Withdraw consent — for analytics, at any time.

To exercise any of these, email hello@basefieldstudio.com. We will respond within one month. We will not charge you or treat you differently for making a request.

If you are in the UK, you can complain to the Information Commissioner's Office at ico.org.uk. If you are in the EEA, you may complain to your local supervisory authority. We would appreciate the chance to address your concern first.

If you are in California, we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You keep the rights to know, delete, correct, and to non-discrimination for exercising them.

Security

We use HTTPS across the site, limit access to inquiry and project data to the people who need it, and choose established providers for email, scheduling, and hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

If we change this policy we will update the date shown at the top of this page and, for material changes, note the change here.

Contact

Questions about this policy, or to exercise your rights: hello@basefieldstudio.com