OwnframeBook a call

We collect as little as we can: enough to book a call, run your project and send an invoice, plus anonymous visit statistics so we know which pages help. We don't run ad trackers, and we never sell your data.

01Who we are

Ownframe is a small design and development studio that builds landing pages, websites and internal tools, and looks after apps that are already live. In this policy, “Ownframe”, “we” and “us” mean the studio. We decide how your personal data is used, so we are its controller.

Questions about your data go to hafiz@ownframe.work. A person reads every email, usually within one business day.

02What we collect

When you book a call through the brief on our homepage, we collect:

  • your name and email address
  • what you want built, your budget range and when you want to go live, if you pick them
  • anything you write in the message field
  • the date, time and time zone you choose for the call

When you email us, we keep the email and anything you attach, such as screenshots, designs or links.

When you work with us, we also keep project details: the scope and proposal, your feedback, invoices and payment records, and any access you give us to your accounts, such as GitHub, Vercel, Webflow, Supabase or Stripe. We only use that access to do the work you asked for.

When you visit the site, our hosting provider records standard server logs: IP address, browser, pages requested and the time of the request. These are used to keep the site running and secure.

We also use Google Analytics, loaded through Google Tag Manager, to see how many people visit, which pages they read and where they came from. It uses cookies and collects details like your approximate location, device, browser and the pages you view. We don't use it to identify you. The cookie policy has the details.

03What we don't collect

  • We don't use advertising cookies or ad tracking pixels.
  • OwnAgent, the chat box on the homepage, gives pre-written answers inside your browser. What you type isn't sent to us or stored.
  • We don't buy contact lists, and we never sell or rent your data.

04Why we use it

Under the UK and EU General Data Protection Regulation (GDPR), we rely on these legal bases:

  • Steps before a contract: booking your call, replying to you and preparing a scope and price you asked for.
  • Contract: building, launching and looking after your project, and invoicing for it.
  • Legitimate interests: keeping the site secure, stopping spam bookings, following up on a call you booked and understanding how the site is used.
  • Legal obligation: keeping financial records for tax and accounting.

We'll only send marketing emails if you've asked for them, and every one has a way to unsubscribe.

05Who we share it with

We use a small set of services to run the studio. Each only gets what it needs to do its job:

  • Cal.com schedules calls. Your booking details are sent there when you book.
  • Google sends the Google Meet invite and hosts the call.
  • Vercel hosts this website and keeps its server logs.
  • Google Analytics and Google Tag Manager measure visits to the site.
  • Our email provider stores the emails we send and receive.
  • Our payment and accounting tools handle invoices and payments for client work.

On client projects we use tools you've approved, often in accounts that are in your name. We'll also share data if the law requires it.

Some of these providers store data outside the UK and the European Economic Area, including in the United States. When they do, the transfer is covered by safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

06How long we keep it

  • If you book a call but we don't work together, we delete your details within 12 months.
  • If we do work together, we keep project and financial records for as long as tax and accounting law requires, then delete them.
  • Server logs are kept for a short time by our hosting provider, then removed automatically.
  • Google Analytics data is kept for the retention period set in our Google Analytics account, then deleted.
  • When a project ends or you cancel Manage, we hand your accounts back and remove our access, unless you ask us to keep it.

07Your rights

You can ask us to:

  • give you a copy of the personal data we hold about you
  • correct anything that's wrong
  • delete your data, where we don't have to keep it by law
  • limit or object to how we use it
  • send your data to you or another provider in a usable format

Email hafiz@ownframe.work and we'll reply within one month. If you're not happy with our answer, you can complain to your data protection authority. In the UK that's the Information Commissioner's Office (ico.org.uk).

08Security

We only ask for the access a job needs, and we remove it when the work is done. No system is perfectly secure, but if something goes wrong that affects your data, we'll tell you promptly.

09Changes

If we change how we handle data, we'll update this page and the date at the top. For bigger changes, we'll email the clients they affect.