Draft of 24 October 2026. This page can change before it is final.
Privacy notice
This notice explains what personal data this website collects, why I collect it, who receives it, how long I keep it and what rights you have.
Who I am
Demola Studio is a one-person business based in Lagos, Nigeria. I build custom websites and web apps for businesses in the US, Canada, the UK and Ireland. I decide how the personal data on this website is used, so I am its controller.
To contact me about your data, email hello@demolastudio.com.
What this notice covers
This notice covers custom.demolastudio.com only.
If you use a system that I built for another business, that business decides how your data is used. Its own privacy notice applies.
What I collect and why
When you send the contact form. I collect your name, your email, your idea, the tools you use now if you add them, and your phone number if you add it. I use them to reply to you and to prepare a written scope. My lawful basis is that you ask me to take these steps before we agree any work.
When I check your email address. Before I save the form, I check that the domain of your email address can receive email. I look up the domain only. I do not contact your mailbox.
When you send the form. A bot check reads technical signals from your browser to stop automated spam. My lawful basis is my legitimate interest in a contact form that is free of spam.
When you give a testimonial. If I invite you to give a testimonial, I collect your name, your role, your business name, your location and your words. I publish them only if you give consent, and you can withdraw consent at any time by email.
When you email or message me. I keep the messages so that I can reply and keep a record of what we agreed.
This website uses no advertising. Vercel Web Analytics counts page visits and Vercel Speed Insights measures page speed. Both work without cookies and do not identify you.
If you do not give the data
Your name, email and idea are required. Without them I cannot reply to your request. The other fields are optional.
Who receives your data
I do not sell your data, and I do not share it for advertising. I share it only with the services that run this website for me:
- Vercel: hosts the website, runs the bot check, and counts visits and page speed (United States).
- Neon: stores the database with your form answers.
- GitHub: stores the daily database backups for 30 days (United States).
- Resend: sends me an email with your form answers (United States).
- Telegram: sends me a message with your form answers, so that I can reply quickly.
- Cloudinary: stores and serves the images on this website (United States).
If the law requires it, I can also have to share data with a court or a public authority.
Transfers outside your country
I work from Nigeria, so I read and manage your data there. The services above store it in the countries shown. When data from the UK or the European Union goes to a country without an adequacy decision, I use the safeguards that the law requires, such as standard contract clauses.
How long I keep your data
- Project requests: 2 years after our last contact, unless you become a client.
- Client records: for as long as we work together, then as long as tax and accounting law requires.
- Testimonials: until you withdraw consent.
- Database backups: 30 days.
How I protect your data
The website and the database use encrypted connections, and only I can sign in to the admin. No system on the internet is fully secure, so I cannot promise that your data is always safe.
Your rights
You can ask me to give you a copy of your data, correct it, delete it, limit how I use it, or send it to you in a file that you can use elsewhere. You can object to how I use it, and you can withdraw a consent at any time.
If you live in a US state with a privacy law, such as California, you have similar rights. I treat requests from every country the same way.
Email hello@demolastudio.com to use these rights. I reply within one month.
You can also complain to the data protection authority where you live, for example the Information Commissioner's Office in the UK, the Data Protection Commission in Ireland, or the Office of the Privacy Commissioner of Canada. In Nigeria, the authority is the Nigeria Data Protection Commission.
Links to other websites
Some links on this website go to websites that I do not control, such as live client systems. Their own privacy notices apply there.
Children
This website is for business owners. It is not for children, and I do not knowingly collect data about children.
Changes to this notice
When this notice changes, I update the date at the top of the page.
The structure of this notice follows a free template by General Legal, PC (general.legal).