Privacy

Mind The Gap Studio LTD, trading as Studio Black, decides how the personal data described here is used. That makes the company its controller under UK data protection law. Its registered details are on our Legal page.

For anything about your data, write to hello@mtgst.com.

When you use the contact form or write to hello@mtgst.com, we receive what you send. The form’s fields reach us as one email to that address, sent from our own mail account. No form service or mailing platform sits in between. You don’t have to send us anything, but without an email address we can’t reply.

What

Your name, your email address and what you tell us. Through the form, that is your company, what you’re building, its stage and when you want to start, and the platforms and budget range if you choose them.

Why

To reply and, if we go on to discuss working together, to prepare that work. We don’t use it for marketing or for automated decisions, we don’t add you to a mailing list, and we never sell it.

Lawful basis

Our legitimate interest in answering the people who write to us (UK GDPR Article 6(1)(f)).

How long

Up to two years after our last exchange, unless we go on to work together. Our contract then sets how long we keep what the work needs.

Like every web server, ours records each request it answers.

What

Your IP address, the time, the page requested, the page that linked to it, and your browser and operating system, as your browser reports them.

Why

To keep the site secure and working, and to trace faults.

Lawful basis

Our legitimate interest in running a secure website (UK GDPR Article 6(1)(f)).

How long

Up to 30 days.

Our server counts the pages people visit, so we can see how the site is used. It does this itself, as it answers each request: no script runs in your browser for it, and nothing is stored on your device.

What

The page you asked for; the site that linked to it, without the rest of its address; any campaign tags in the link (source, medium and campaign); your browser’s language; and your browser, operating system and type of device. When you send the contact form, we count that a message was sent, never what it says.

How

Our web server passes these details to our analytics server, which runs Umami, open-source software we host ourselves. It shortens your IP address first. Umami uses the shortened address to find your country and, with your browser’s details and a value that changes every day, to tell one visitor’s pages from another’s on the same day. It keeps the country and that day’s identifier, never the address.

Why

To see which pages people read and how they find the site, so we can improve it. We don’t use it to identify you, for advertising, or to follow you on other sites.

Lawful basis

Our legitimate interest in understanding how the site is used, to improve it (UK GDPR Article 6(1)(f)).

How long

Up to 25 months.

Your choice

If your browser sends a Global Privacy Control or Do Not Track signal, we never count your visits. You can also turn analytics off in this browser with the link below. That stores the one cookie described under Cookies, and nothing else.

Turn off analytics in this browserTurn it back on

To stop anyone flooding the form, we count the messages each address sends.

What

A keyed hash of your IP address (for an IPv6 address, of its network prefix), with the time you sent the form, in one file on our server. The file never holds the address itself.

Why

To limit how many messages one address can send in an hour and in a day.

Lawful basis

Our legitimate interest in protecting the form from abuse (UK GDPR Article 6(1)(f)).

How long

Up to 24 hours.

Our host, A2 Hosting (hosting.com), runs the web server, the form and our mailbox on servers in the Netherlands. It processes this data for us, only on our instructions.

Hetzner Online runs our analytics server in Germany. It processes this data for us, only on our instructions, under a data processing agreement.

We may forward email sent to hello@mtgst.com, including the form’s, to our Gmail account, where Google stores it.

A2 Hosting and Google are US companies, so the law treats their handling of this data as a transfer to the US. Both transfers rely on the UK-US data bridge, under which both companies are certified.

No one else receives it. No form service, mailing platform, analytics or advertising company is involved: our analytics software is our own installation. We disclose personal data only when the law requires it.

This site sets one cookie, and only if you turn analytics off: mtgst_analytics, which records that choice for a year. Nothing else is stored on your device. Its fonts and files all come from our own hosting, so no outside service, such as a font library or an analytics company, learns that you visited.

You can ask us to:

• tell you whether we hold personal data about you, and send you a copy
• correct it
• delete it
• restrict how we use it

You can also object to our use of your data at any time. When you do, we stop, unless we have a compelling reason the law recognises, such as defending a legal claim.

Write to hello@mtgst.com. We reply within one month.

If you’re unhappy with how we’ve handled your data, you can complain to us at hello@mtgst.com. We acknowledge a complaint within 30 days, look into it, and tell you what we found and what we’ve done.

You can also complain to the UK regulator, the Information Commission (ICO), at ico.org.uk/make-a-complaint. You don’t have to come to us first.

When this notice changes, the new version appears here with its date.