Privacy Policy

We collect what you type into our forms, and the technical details your browser sends with it. There are no cookies on this site, no analytics, and no tracking pixels. We do not sell anything to anyone, and we never contact your clients. Opening a partner account involves an identity check run by a specialist provider — your documents go to them, never to us.

When you send a brief or ask for a call, we receive what you filled in:

• Your name and work email address
• Your agency, and the industry your client is in
• Which services you're asking about, your timeline and your budget range
• Whatever you write in the brief or the notes field

Only the email address is required. Anything else you leave blank simply isn't collected.

Submitting a form also records your IP address, your browser's user-agent string, the page you came from and the time. Our web server additionally keeps standard access logs, as every web server does. We use this to understand where enquiries come from and to stop automated abuse — nothing else.

Submissions are written to a file on our hosting account that sits outside the public web directory and is not reachable from the internet. A copy is emailed to us so we see it promptly. That is the whole path — there is no CRM, no marketing platform and no third-party form processor in between.

This site sets no cookies and runs no analytics. We do not use Google Analytics, advertising pixels, session recording or any equivalent, and nothing is written to your browser's local storage. There is no cookie banner because there is nothing to consent to.

Three, and each does exactly one job:

• Google Fonts serves our typefaces. Your browser requests them from Google directly, so Google receives your IP address and user-agent as part of that request — the same as on any site using their font service. We receive nothing back, and no font request identifies you to us.
• Didit runs the identity check when you open a partner account, and the company check when we take on work for you. You upload your documents to Didit, not to us — they never pass through this site and we could not produce a copy if you asked. What comes back to us is a reference number, whether the check passed, and for a company check the registered name and whether you appear on it as an officer.
• Wave raises our invoices and processes card payments. Your billing details go to Wave when we invoice you. If you save a card, it is saved with Wave — it never touches our systems, and we cannot see it.

A content blocker will stop the font request and the site falls back to your system fonts. The other two only come into play once you are opening an account or being invoiced. Each is bound to use what it receives only to provide that service to us.

Accounts are created one of two ways: we issue you one, or you create one yourself when you request a free homepage. Either way we hold the email address it's registered to and a password you set, and we use them for one thing — confirming it's you. Your password is never stored in a readable form and nobody here can see it, which is why a reset replaces it rather than retrieving it. Sign-in activity is logged so we can spot anyone trying to break in. Ask us to close your account and we'll delete the login and everything attached to it.

Asking for a free homepage creates a partner account, because the offer is one per partner and we can't hold you to that without one. That form collects more than the others, and all of it is stored on your account rather than just on the request:

• About you: your name, role, work email and phone number
• About your agency: its name, website, where you're based, roughly how many people, and what you sell
• How you found us
• About the business you're pitching: their name, website, industry, where they trade, and why you think you can win it

The agency details sit on your account so we aren't asking again on every job — you can see exactly what we hold on your dashboard. The prospect's details we use to build the page and for nothing else: we don't contact that business, add them to anything, or pass their details on. Ask us to delete any of it and we will.

The sign-up form at /onboard creates your account, records your acceptance of the mutual NDA, and takes your first brief. On top of the agency details above, we store:

• That you accepted the NDA: which version, the name you typed as signature, the date and time, and the IP address it came from
• The brief itself, and any document you attach to it

Attachments are stored on our server outside the public web directory, under a randomised filename with restricted permissions. They are never published, linked or served over the web — there is no address at which anyone could fetch one. We keep the signature record for as long as the agreement is capable of being relied on.

When you engage us as a white-label partner, we may process information about your clients on your behalf. That information belongs to you and your client. We do not contact your clients, market to them, or use their information for any purpose beyond delivering the work you've asked us to do. If you ask us to return or destroy it at the end of a project, we will.

Enquiries are kept for as long as we're in conversation and for as long afterwards as we need them for our accounting and legal obligations. Project records are kept for the life of the engagement and a reasonable period after. Ask us to delete your enquiry and we will, unless we're legally required to keep it.

Email us and we'll action any of these:

• A copy of what we hold about you
• A correction to anything that's wrong
• Deletion of your enquiry and any related correspondence
• An explanation of how a particular piece of information reached us

We'll respond within thirty days. You don't need to give a reason, and asking costs you nothing.

The site is served over HTTPS. Submissions are stored outside the public web directory with restricted file permissions, and access is limited to the people who need it. No system is perfectly secure and we won't pretend otherwise — but we hold as little as we can, which is the most effective protection available.

This is a business-to-business service. It is not directed at children and we do not knowingly collect information from anyone under 16.

If we change how the site handles information, we'll change this page and update the date below. Anything material will be called out here rather than slipped in quietly.