PRIVACY POLICY

Module7 ("we", "us", "our") is a digital studio registered as [Company legal name], registration number [number], with its registered address at [address].

This policy explains how we collect, use and protect personal information when you visit our website or get in touch with us. We are the party responsible for your personal information.

We collect information in three ways:

• Information you give us. When you fill in our contact form or email us, we collect your name, email address, company name and anything you choose to tell us about your project.
• Information collected automatically. When you visit our website, we collect technical information such as your IP address, browser type, device, pages visited and time spent on the site.
• Information from clients. If you work with us, we collect the contact and billing details needed to deliver our services and invoice for them.

We use your personal information to:

• Respond to your enquiries and prepare proposals.
• Deliver, manage and invoice for the services you ask us for.
• Understand how our website is used, so we can improve it.
• Keep our website and systems secure.
• Meet our legal, tax and accounting obligations.

We only send you marketing emails if you've agreed to receive them, and you can unsubscribe at any time using the link in each email.

Our website uses cookies and similar technologies to keep the site working and to understand how visitors use it. We use [analytics provider] to collect anonymous usage statistics.

You can control or delete cookies through your browser settings. Blocking some cookies may affect how parts of the website work.

We don't sell your personal information. We only share it with trusted service providers who help us run our business, such as:

• Website hosting and email providers.
• Analytics and form-handling services.
• Accounting and payment providers.

These providers may only use your information to provide services to us. We may also share information where the law requires it.

Some of our service providers are based outside [your country]. Where we transfer personal information across borders, we make sure it is protected by appropriate safeguards, as required by applicable data protection law.

We keep enquiry information for up to [24 months] after our last contact with you. Client records are kept for as long as needed to deliver our services and meet legal and tax requirements, usually [5 to 7 years]. After that, we delete or anonymise it.

We use reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access. This includes encrypted connections, access controls and working only with reputable providers. No system is completely secure, but we take protecting your information seriously.

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you.
• Ask us to correct or update it.
• Ask us to delete it.
• Object to or restrict how we use it.
• Withdraw your consent at any time.
• Complain to your data protection authority.

To use any of these rights, email us at [email protected]. We'll respond within [30 days].

We may update this policy from time to time. When we do, we'll change the "last updated" date at the top of this page. If the changes are significant, we'll let you know more directly.

If you have questions about this policy or how we handle your information, email [email protected] or write to us at [address].