Privacy policy

Who we are

Estrix Studio, LLC is a New York, United States business. This policy covers estrixstudio.com and its inquiry service. Contact [email protected] about this policy or your information.

Information we collect

When you contact us, we receive your name, email, project summary and any company, service, engagement, budget or timeline details you choose to provide. Please send a non-confidential overview; do not include passwords or sensitive personal information.

Our hosting provider processes network and request information to deliver and protect the website. Our application uses hashed network addresses with short expiry for abuse prevention. Administrator access uses authentication records and security sessions.

How we use information

We use inquiry information to evaluate your request, communicate with you and discuss a possible engagement. We process necessary technical information to operate the site, prevent misuse and protect our services. Where applicable, these purposes rely on steps taken at your request before a contract or our legitimate interests in operating a secure business website. Optional measurement relies on your consent.

Optional measurement

If you enable optional cookies, we record page paths, interactions with project links, form-stage events, browser and session identifiers, device category and limited referral information. Names, email addresses and message contents are not included in measurement events. We do not use advertising cookies or sell this information. Global Privacy Control and Do Not Track disable optional event collection.

Service providers and sharing

The website runs on a virtual private server. Cloudflare stores records in D1, provides network services and delivers internal email notifications. Notifications link to the private administrator application and do not contain your inquiry text or contact details. Email sent directly to our contact address is processed by our email providers, including Google Workspace and Gmail.

Access is limited to people who need information to handle inquiries or operate the service. We may disclose information when required by law or to protect legal rights and security. Providers may process data in the United States and other countries. Where applicable law requires safeguards for international transfers, those requirements apply to our processing and service-provider arrangements.

Retention and protection

Inquiry records and associated internal notes in the website database are scheduled for deletion after 24 months. Optional measurement events are scheduled for deletion after 90 days. Administrator sessions expire after eight hours. Backups and provider security logs follow their separate service retention cycles; deletion from the active database does not immediately erase a retained backup.

Direct email correspondence and records arising from a subsequent client engagement are handled separately as needed for that relationship and applicable obligations. We use access controls, encrypted connections and multi-factor administrator authentication. No internet service can guarantee absolute security.

Your choices and rights

Use Cookie settings in the footer to disable optional measurement at any time. Withdrawal does not affect processing that already occurred. Contact [email protected] to request access, correction or deletion, or to ask about restriction, objection or portability rights that apply where you live. We may verify your identity and retain information where a legal obligation requires it. You may also contact your local data protection authority where applicable.

Children and updates

This is a business services website and is not directed to children under 13. If you believe a child provided personal information, contact us so we can investigate and remove it as appropriate. We publish policy changes on this page with an updated date.