Privacy notice

Who is responsible

Sakurahaus is a solo web design and automation studio working remotely from London, and is the data controller for information submitted through this site. Questions about this notice, or about information already held, go to hello@sakurahaus.com.

Which law applies

Sakurahaus is established in the United Kingdom, so the UK General Data Protection Regulation governs everything it does with personal information, wherever in the world the person is. Where the studio offers its services to people in the European Economic Area, the EU General Data Protection Regulation applies as well.

Clients are taken worldwide. Rather than vary by country, the studio applies the same standard — the one set out below — to everyone who contacts it, whichever country they are in.

What is collected

Only what is typed into one of the two forms. Nothing is gathered in the background.

• The enquiry form collects a name, an email address, and whatever is written in the message field.
• The launch list collects an email address and nothing else.

Why, and on what basis

An enquiry is used to reply to that enquiry and to discuss the work it concerns. The basis is the steps taken at the sender’s request before entering into a contract.

A launch list address is used once, to send a single email when the site opens. The basis is consent, given by submitting the form, and it can be withdrawn at any time by replying to that email or writing to the address above.

Neither is used for marketing, sold, or shared with anyone for their own purposes.

Cookies and measurement

This site sets no cookies, stores nothing in the browser, and carries no advertising or tracking pixels. Nothing here follows a visitor between sites.

Cloudflare hosts this site, so every request passes through it and it reports the totals to the studio — views, visitor numbers, which pages. This happens on Cloudflare’s servers rather than in the browser, using the technical data any web server receives, including an IP address. What the studio sees is aggregate and identifies nobody. The basis is its legitimate interest in knowing whether its own site is working.

Who else handles it

Two services are involved in running this page.

• Formspree, which receives and stores form submissions and forwards them by email. Formspree is based in the United States, so a submission is transferred outside the UK.
• Cloudflare, which hosts the site, serves the page and routes email for the studio. Cloudflare processes the technical request data any web server receives, such as an IP address, to deliver the page and protect against abuse.
• The provider hosting the studio inbox that enquiries are delivered to, which stores those messages as it would any other email.

These act as processors: they handle the information to provide their service, not for their own ends.

Formspree states that it relies on Standard Contractual Clauses as a data processor, and that its services are hosted with Amazon Web Services in the United States. Those clauses are the safeguard relied on for the transfer.

How long it is kept

The launch list is deleted as soon as the launch email has been sent. It exists for that one message and nothing outlives it.

An enquiry that does not lead to work is deleted twelve months after the last message between us. If it does lead to work, the correspondence is kept for six years after the project ends, which is the period the studio may need it for tax records and in case of any later dispute. After that it is deleted.

Your rights

You can ask for a copy of the information held about you, ask for it to be corrected or deleted, ask for its use to be restricted, object to how it is used, or ask for it in a portable form to take elsewhere. Where consent is the basis, it can be withdrawn at any time. Write to the address above and it will be actioned.

If the response is unsatisfactory, a complaint can be made to the UK Information Commissioner’s Office at ico.org.uk. Anyone in the European Economic Area may instead complain to the supervisory authority where they live or work.