Legal
Privacy Policy
Last updated: July 2026
Swash Studio (“Swash”, “we”, “us”) builds websites, brands, and motion. This policy explains what personal information we collect when you use this site, why we collect it, who processes it, and the rights you have over it. We keep it plain, because a privacy policy nobody can read protects nobody.
Who is responsible for your data
Swash Studio is the responsible party (data controller) for the information collected through this site. You can reach us at hello@swash.studio for anything in this policy, including requests to access or delete your data.
What we collect
We only collect what you choose to send us. Specifically:
Brief form. Your name, email, phone number (optional), preferred contact method, and the project details you provide: industry, goals, features, timeline, budget, brand status, brand colours, reference links, notes, and any logo or asset files you upload or link.
Review form. Your name, company or project (optional), email, star rating, and review text. Your email is used only to verify the review and is never published.
Technical data. When you submit a form, our servers briefly process your IP address to prevent spam and abuse. The site stores a small amount of data in your browser’s local storage (a saved draft of your brief and a first-visit flag). These are functional only, are not shared, and are not advertising cookies.
We do not run analytics, advertising trackers, or third-party cookies on this site.
Why we use it
To respond to your enquiry, prepare and deliver your video demo and proposal, carry out an engagement if you proceed, publish approved reviews (only after we verify them with you), and keep the site secure. We do not use your information for automated decision-making or profiling.
Who processes it
We do not sell your data. We share it only with the service providers that make this site work:
Vercel hosts the site. Cloudflare provides DNS and email routing. Resend delivers the emails generated by the forms. These providers process data on servers outside South Africa (including the United States and European Union), so submitting a form involves a cross-border transfer of your information. We only use reputable providers with their own security and data-protection commitments.
How long we keep it
We keep brief and review submissions for as long as needed to respond to you and, if you become a client, for the duration of our engagement plus a reasonable period for our records. Uploaded files are kept only as long as they are useful to your project. Ask us to delete your information at any time and we will, unless we are required to keep it by law.
Your rights
Under South Africa’s POPIA (and, where it applies, the EU GDPR) you can ask us to confirm what we hold about you, correct it, delete it, or stop using it. You may also object to processing and, if you are unhappy with how we have handled your data, complain to the Information Regulator of South Africa. To exercise any of these, email hello@swash.studio and we will respond promptly.
Security
Forms are submitted over encrypted HTTPS, submissions are rate-limited and validated, and access to the studio inbox is restricted. No system is perfectly secure, but we take reasonable measures to protect what you share.
Children
This site is intended for businesses and adults. We do not knowingly collect information from anyone under 18.
Changes to this policy
If we change how we handle data, we will update this page and its “last updated” date. Material changes will be reflected here before they take effect.