Privacy Policy

This Privacy Policy describes how Aganta Foundry (the “Studio”) collects, uses, discloses, and otherwise processes personal information in connection with agantafoundry.com (the “Site”), enquiries, appointments, forms, communications, and the provision of creative services (collectively, the “Services”).

1. Scope and application

This Privacy Policy applies to personal information processed by the Studio in connection with the Site and the Services, including information submitted through online forms, appointment-booking services, email, and other communications with the Studio. Additional terms or notices may apply where the Studio provides a specific service or where required by applicable law.

For purposes of this Policy, “personal information” means information relating to an identified or identifiable individual, or any equivalent term defined by applicable privacy law.

2. Categories of personal information

The categories of personal information processed depend on the nature of the interaction with the Studio and the information voluntarily supplied or generated in connection with it.

2.1 Information provided by individuals

The Studio may process the following categories of information supplied by an individual, a client, or an authorised representative:

1. Identity and contact information, including name, email address, telephone number, business name, professional title, website address, and social-media profile details.
2. Enquiry and communication information, including the content of enquiries, correspondence, meeting requests, feedback, approvals, and other communications with the Studio.
3. Appointment information, including booking details, meeting date and time, contact details, and information included in a booking form.
4. Project and business information, including business objectives, audience information, brand positioning, competitor information, creative preferences, project scope, budget, schedule, decision-making roles, technical requirements, and materials submitted for a project.
5. Workshop and discovery information, including professional experience, opinions, background information, and personal stories voluntarily supplied in connection with brand strategy or discovery work.
6. Project and transaction records, including proposals, agreements, invoices, payment records, deliverable records, revision requests, and related administrative information.
7. Feedback and promotional permissions, including feedback, testimonials, and records of permissions or restrictions relating to publication of client work or statements.
8. Subscription information, including an email address and subscription preferences where an individual subscribes to studio updates.

Individuals should not submit passwords, payment-card details, sensitive personal information, or personal information relating to another individual unless the information is necessary for the relevant engagement, the submitter is authorised to provide it, and an appropriate handling arrangement has been established where required.

2.2 Technical and operational information

When the Site is accessed, hosting, content-delivery, security, and other infrastructure providers may process technical information required to deliver the Site, protect its availability, prevent abuse, investigate errors, and maintain system security. Depending on the relevant provider and its configuration, this information may include IP address, request timestamp, requested URL, referrer information, browser or device information, and technical or security logs.

2.3 Website analytics

The Studio uses Umami for website analytics. Umami’s standard web tracker does not use cookies. The tracker may collect page views, referring URLs, browser, operating system, device type, screen dimensions, language, and approximate location. Under Umami’s standard configuration, an IP address may be processed to calculate approximate location and generate an anonymous session identifier, but is not stored as a separate field in the standard analytics session record. Such processing does not, by itself, guarantee that all analytics data is anonymous in every context.

Analytics information is used to assess Site performance, understand aggregate visitor activity, improve the Site, and diagnose technical issues. Further information concerning Umami’s standard collection and session metrics is available in the Umami FAQ and Metric Definitions.

This disclosure relates to the Umami tracker. Other scripts, embedded content, or third-party services, if added to the Site, may collect information under their own functionality and terms.

3. Sources of personal information

The Studio obtains personal information from the following sources, as applicable:

1. directly from the individual concerned;
2. from a client or representative authorised to act on behalf of an individual or organisation;
3. automatically through access to and use of the Site, including through analytics and technical infrastructure; and
4. from service providers engaged to support scheduling, form submissions, communications, analytics, hosting, payment administration, storage, or other business operations.

4. Purposes of processing

The Studio may process personal information for the following purposes, subject to applicable law:

1. receiving, evaluating, and responding to enquiries;
2. arranging consultations, workshops, meetings, and other appointments;
3. preparing proposals, estimates, strategies, creative concepts, and other project materials;
4. performing, administering, and documenting Services, including project coordination, feedback, revisions, approvals, and delivery;
5. using AI-enabled tools and other software to assist with ideation, research, summarisation, drafting, content variation, and creative-production or administrative workflows;
6. administering proposals, agreements, invoices, payments, tax and accounting records, and other business administration;
7. providing updates or marketing communications where permitted by law and, where required, with consent;
8. measuring Site performance, understanding use of Site content, improving the Site, and maintaining its security and functionality;
9. preventing fraud, misuse, unauthorised access, or other harmful activity;
10. establishing, exercising, or defending legal claims, responding to lawful requests, and complying with legal obligations; and
11. any other purpose disclosed at the point of collection or authorised by the individual concerned.

5. Legal grounds for processing

Where applicable law requires a legal basis for processing personal information, the Studio relies on a basis permitted by that law in light of the relevant purpose and circumstances. Such basis may include an individual’s consent, steps taken at the individual’s request before entering into an agreement, performance of an agreement, compliance with a legal obligation, or another lawful basis available under the applicable law.

Where processing is based on consent, consent may be withdrawn in accordance with applicable law. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. It may affect the Studio’s ability to provide a service where the relevant information is necessary for that service.

6. Disclosure of personal information

The Studio may disclose personal information to the following categories of recipients, to the extent reasonably necessary for the purposes described in this Policy or as otherwise permitted or required by law:

1. Service providers and processors supporting the Studio’s operations or delivery of Services, including providers of forms, scheduling, analytics, website hosting and delivery, email, mailing-list management, file storage, collaboration, payment processing, accounting, project administration, and AI-enabled tools. Depending on the relevant activity, these providers may include Tally, Cal.com, Umami, Cloudflare, MailerLite, services such as ChatGPT or Google Gemini, and other providers actually engaged for the relevant task. AI service providers may process information submitted to them under their own terms, privacy policies, product offerings, and account settings.
2. Professional advisers, including legal advisers, accountants, auditors, and insurers, where disclosure is reasonably necessary for professional, financial, or legal advice or administration.
3. Public authorities and other recipients, where disclosure is required by applicable law, a valid legal process, or is reasonably necessary to protect rights, safety, property, or system security.
4. Transaction-related recipients, in connection with a proposed or completed reorganisation, transfer, or disposition of relevant business assets, subject to applicable law and any required safeguards.
5. Recipients authorised by the individual or client, or recipients whose involvement is necessary to perform a requested service and has been disclosed in the relevant context.

The Studio does not disclose personal information indiscriminately. Access by service providers is limited, as appropriate to the service, by the provider’s role, the applicable terms, and the purpose for which the information is supplied.

7. International processing and transfers

The Studio serves clients internationally and uses online service providers. Personal information may therefore be processed or stored in a country other than the country in which the individual is located. The privacy laws of the receiving country may differ from those of the individual’s country of residence. Where applicable law requires a safeguard, contractual measure, or other condition for an international transfer, the Studio will apply the measure required for the relevant transfer.

8. Retention of personal information

The Studio retains personal information for no longer than is reasonably necessary for the purpose for which it was collected, subject to applicable legal, accounting, reporting, security, and dispute-resolution requirements.

The applicable retention period depends on the category of information and the circumstances of collection. Enquiry information may be deleted when it is no longer required to evaluate or respond to the enquiry. Project, contract, financial, and communication records may be retained for the duration of the client relationship and for any additional period reasonably necessary to administer the engagement, comply with legal obligations, or establish or defend legal claims. Analytics retention is affected by the deployment and retention settings configured for Umami. Information will be deleted or anonymised when retention is no longer required, subject to applicable law and legitimate recordkeeping needs.

9. Privacy rights and requests

Depending on the individual’s location and the law applicable to the processing, an individual may have rights to request access to personal information, correction of inaccurate information, deletion, restriction or objection to certain processing, portability, withdrawal of consent, or to lodge a complaint with a competent authority. The availability and scope of these rights depend on applicable law and may be subject to conditions and exceptions.

Requests may be submitted to hello@agantafoundry.com. The Studio may request information reasonably necessary to verify the identity and authority of the requester and to clarify or process the request. Responses will be provided within the period and in the manner required by applicable law. A request relating to information processed by a third-party provider in that provider’s own capacity may also need to be directed to that provider.

Where applicable, marketing emails may be discontinued through the unsubscribe mechanism included in the communication or by contacting the Studio.

10. Confidential information, project submissions, and AI-enabled tools

Project submissions may contain confidential business information, brand strategies, customer insights, unpublished creative work, commercial plans, or technical requirements. The Studio processes such information for evaluating, planning, performing, and administering the relevant engagement, subject to applicable law and the terms agreed with the Client.

The Studio uses AI-enabled tools in certain creative and administrative workflows, including ideation, research, summarisation, drafting, content variation, and creative-production support. Where reasonably necessary for a task, selected prompts, excerpts from project briefs, text, images, reference materials, or other project information may be submitted to third-party AI services, which may include ChatGPT, Google Gemini, or other services used for the relevant task.

AI service providers operate independently of the Studio and process submitted information under their own terms, privacy policies, product or subscription offerings, and account settings. Depending on the provider, service, and settings, submitted information may be retained, accessed by authorised human reviewers, or used to develop or improve models and services. The Studio does not represent that all providers follow the same practices or that information submitted to every AI service will never be retained or used for model improvement. The Studio will take reasonable steps to select and configure tools appropriately and to limit submitted information to what is reasonably necessary for the relevant task. The Studio cannot independently control an AI provider’s internal processing.

A Client or other submitter is responsible for ensuring that it has the authority and any required permissions to provide personal information or materials relating to another individual and to permit the processing described in this Policy. Clients should notify the Studio in writing, before or when providing relevant materials, of any material that must not be submitted to AI-enabled services or any applicable restriction on third-party processing. The Studio will confirm in writing whether it can accommodate the requested restriction; any accepted restriction shall be recorded in the applicable Project Agreement or other written agreement. Separate written agreements may impose additional confidentiality, security, or data-handling obligations for a particular engagement.

11. Testimonials and portfolio use

Submission of feedback, project materials, or a testimonial does not, by itself, authorise publication of the submitter’s name, likeness, testimonial, confidential information, or client work for promotional purposes. The Studio will obtain separate written permission before publicly identifying a client or publishing client work, testimonials, or confidential project information, unless an applicable written agreement expressly provides otherwise.

A request to withdraw permission for future use may be submitted to the Studio. Withdrawal will not necessarily require the recall of material already printed, distributed, or incorporated into third-party platforms, but the Studio will consider the request in accordance with applicable law and any applicable written agreement.

12. Security

The Studio implements reasonable administrative, technical, and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. No system for transmitting or storing information can be guaranteed to be completely secure. The Studio cannot warrant absolute security of information transmitted over the internet or held by third-party service providers.

13. Children

The Site and the Studio’s ordinary Services are directed primarily to businesses and adult professionals and are not intended to solicit personal information directly from children. Personal information concerning a child should not be submitted unless the submission is necessary for a specific engagement, the submitter is authorised to provide it, and all applicable legal requirements are satisfied. The Studio will take steps required by applicable law if it becomes aware that personal information has been processed unlawfully.

14. Third-party websites and services

The Site may contain links to websites or services operated by third parties. Such websites and services are subject to their own terms and privacy practices. The Studio does not control and is not responsible for the privacy practices of independent third parties. Individuals should review the applicable privacy notices before providing information to those third parties.

15. Amendments to this Policy

The Studio may amend this Policy to reflect changes in its Services, information practices, service providers, or legal requirements. The revised version will be published on the Site with an updated “Last updated” date. Where applicable law requires notice or consent in connection with a material change, the Studio will take the steps required by that law.

16. Contact

Privacy-related enquiries and requests may be directed to:

Aganta Foundry
Email: hello@agantafoundry.com
Website: agantafoundry.com

Template Reference

This document was prepared with reference to public legal templates made available by General Legal, PC under the CC0 1.0 Universal licence. General Legal has not reviewed, approved, or endorsed this adaptation. This document is provided for general reference purposes only and does not constitute legal advice. Its use does not create an attorney-client relationship with General Legal.