Privacy

The short version

One cookie of our own, which remembers whether you are reading in English or Turkish. Google Analytics, but only if you allow it: say no, or ignore the question, and your browser never contacts Google at all. No advertising pixels either way. The only personal information we hold about you is what you chose to type into a form and send us, and we use it to reply to you.

Who is responsible for it

Needmug Digital is the data controller for everything described here. We are registered in England and Wales under company number 12050125, with our registered office at 338a Regents Park Road, Office 3 and 4, London N3 2LN, United Kingdom, and a second studio in Istanbul.

We are small enough that the person who reads your enquiry is the person who answers it. We are not required to appoint a data protection officer, so anything to do with this notice goes to the same address as everything else: contact@needmug.com.

What we collect

Only what you send us, plus the logs any website generates.

• The contact form: your name, your email address, your company if you give one, and your message.
• The quote form: the services you are asking about, the stage you are at, your timescale, your name, email address, phone number if you give one, your company, and your notes.
• Anything you put in an email you send us directly.
• Server logs kept by our host, which record requests to the site along with IP addresses. They exist so the site can be kept running and secure.
• If you allow analytics: which pages you opened, how you arrived, roughly where in the world you are, and what kind of device and browser you used. It reaches us as counts and charts. We cannot turn any of it back into a name, and we do not try.

Why we hold it

To answer you. If an enquiry turns into a project, the same details become part of the correspondence for that project.

The lawful basis is our legitimate interest in replying to someone who has contacted us about our work, and, once there is a project, performance of the contract we have with you.

Analytics is the one thing on this site that runs on consent, which is why it is the one thing you get asked about. Withdraw it and the measuring stops from that moment: it does not affect anything you have already sent us.

What we do not do with it

Some of this is obvious. It is written down anyway, because the obvious version is what people want to know.

• We do not sell or rent your details to anyone, for any purpose.
• We do not add you to a mailing list because you enquired.
• We do not pass your details to advertisers, data brokers, or lead-generation services.
• We do not run advertising pixels, and the advertising features of our analytics account are switched off. Google is told, on every page view, not to use what it sees for ads or personalisation.
• We do not build a profile of you, and nothing on this site makes an automated decision about you.

Cookies

This site sets one cookie of its own. It is called needmug_locale, it holds either en or tr, and it lasts a year.

Its job is to keep you in the language you chose, or in the one we worked out from your browser settings. We set it ourselves, it never leaves this site, and it cannot identify you. Delete it and the site carries on working: it falls back to your browser’s language setting.

Allow analytics and Google sets two more, _ga and one beginning _ga_. They give your browser an identifier so that four pages read in one sitting count as one visit rather than four, and so a return next month is recognisable as a return. They last two years unless you clear them.

Decline, or close the banner without answering, and none of that happens. The Google script is never loaded, so your browser makes no request to Google and there is nothing for it to set a cookie from. Your answer is kept in this browser’s local storage rather than in a cookie, which means it never travels with a request.

Change your mind at any time from Analytics settings, at the foot of every page.

Who else handles it

The site is hosted by Vercel Inc., which serves every page and keeps the server logs described above. Vercel is a US company, and where information leaves the UK it is covered by the safeguards in the data processing terms we hold with them.

What you send through a form is stored in a database run by Supabase. We chose their Irish region, so the record of your enquiry sits on servers in Ireland rather than crossing the Atlantic. Supabase Inc. is a US company, and its engineers can reach the database when we ask them for support.

A copy also arrives in our own inbox, which sits with our email provider. That provider can technically reach what is stored there, in the same way any email host can.

Google Ireland Limited receives the analytics, and only from visitors who allowed it. Google is a US company, so some of what it collects is processed outside the UK under the safeguards in its own data processing terms. Nothing reaches Google from a visitor who declined, because the script that would send it is never loaded.

Nobody else. There is no marketing platform behind this site, no advertising account, and no CRM quietly collecting what you read.

How long we keep it

We do not run a deletion schedule, and it would be untrue to claim one. An enquiry stays in the database and in our inbox, so that a conversation picked up a year later still has its beginning attached.

Ask us to delete what we hold about you and we will, from both, unless we need part of it to meet a legal or accounting obligation. Write to contact@needmug.com.

Keeping it safe

The site is served over HTTPS, so anything you type into a form is encrypted between your browser and us.

This site never asks for payment card details and has no way to take them. If a page claiming to be ours ever asks you for card details, it is not ours.

Your rights

UK data protection law gives you rights over the information we hold about you. To use any of them, write to contact@needmug.com. There is nothing to pay, and we will reply within a month.

• Ask what we hold about you, and get a copy of it.
• Have it corrected, if it is wrong.
• Have it deleted.
• Restrict what we use it for, or object to us using it at all.
• Have it sent to you, or to someone else, in a portable form.

If you are unhappy

Tell us first, at contact@needmug.com, and we will try to put it right. If you would rather not, or our answer does not satisfy you, you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.

Changes to this notice

When what we do with your information changes, this page changes with it and the date below moves. The version on this page is the one that applies.