Legal

Privacy Policy

Last updated: September 12 2026

1. Introduction & Scope

This Privacy Policy explains how Unifystudio LLC ("Unify Studio", "we", "us", or "our"), collects, uses, stores, and protects personal data when you visit our website at unifystudio.co, engage our web engineering, technical SEO, and design services, or communicate with our team.

We are committed to operating transparently and respecting your privacy in strict accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), the California Consumer Privacy Act (CCPA/CPRA), and applicable international data protection standards.

2. Information We Collect

We only collect personal information that is strictly necessary to evaluate project inquiries, deliver technical services, maintain website security, and analyze site reliability.

A. Information You Provide Directly

  • Contact & Discovery Inquiries: When you submit an inquiry through our contact form, email us, or schedule an introduction call via Calendly, we collect your name, work email address, company name, website URL, and details concerning your project scope or technical requirements.
  • Commercial & Billing Records: For active clients, we process invoicing details, tax identification numbers, billing addresses, and authorized representative contact details necessary to execute commercial agreements.

B. Information Collected Automatically

  • Technical & Telemetry Data: When navigating our site, our servers log standard technical metadata, including your IP address, browser type and version, device category, operating system, referral URLs, pages visited, and timestamped network requests.
  • Performance & Web Vitals Metrics: We collect aggregated diagnostic telemetry (such as Largest Contentful Paint and Cumulative Layout Shift) to benchmark page delivery and guarantee high performance across edge infrastructure.

We do not collect sensitive categories of personal data (such as health information, biometric data, religious beliefs, or political opinions) nor do we process payment card credentials directly on our servers.

3. How We Use Information

We process personal and technical information for the following specific purposes:

  • To evaluate project scopes, prepare statements of work, and provide engineering proposals.
  • To deliver, maintain, and support custom software development, WordPress engineering, front-end applications, and technical SEO engagements.
  • To respond to your inquiries, schedule technical consultation calls, and manage client communications.
  • To monitor, diagnose, and maintain edge network security, prevent automated bot abuse, and enforce rate-limiting.
  • To analyze anonymous traffic trends and optimize website performance, ensuring compliance with Core Web Vitals thresholds.
  • To fulfill statutory accounting, taxation, and legal recordkeeping obligations.

Under the GDPR, we process personal data based on the following recognized legal grounds:

  • Contractual Performance (Art. 6(1)(b) GDPR): Processing is necessary to take preliminary steps at your request prior to entering into a contract (such as scoping calls and quotes) or to fulfill our contractual commitments.
  • Legitimate Interests (Art. 6(1)(f) GDPR): We rely on legitimate business interests to operate a secure, performant website, safeguard our engineering infrastructure, and correspond with professional prospective clients.
  • Legal Obligations (Art. 6(1)(c) GDPR): Processing required to comply with statutory accounting, tax audits, or lawful regulatory requests.
  • Consent (Art. 6(1)(a) GDPR): Where applicable, such as when you opt into non-essential analytics tracking or specific communications. You may revoke consent at any time.

5. Cookies & Tracking Technologies

We adhere to a privacy-first engineering philosophy. We use minimal cookies and local storage entries strictly necessary for core site performance, security headers, and language preferences.

  • Essential Technical Cookies: Strictly necessary for site routing, CDN caching, language switching preference (ES / EN), and security validation. These do not require prior consent.
  • Performance Diagnostics: We may utilize lightweight, privacy-respecting telemetry to monitor page load times and Core Web Vitals without invasive cross-site profiling or third-party advertising trackers.

You can configure your browser to block or alert you about cookies. Note that disabling essential storage may affect certain navigational capabilities.

6. Third-Party Subprocessors

We do not sell, rent, or trade your personal data to data brokers or advertising networks. We only disclose information to trusted technical infrastructure providers bound by rigorous confidentiality and data processing agreements:

  • Edge Hosting & CDN: Cloud infrastructure providers (such as Cloudflare, WP Engine, or Vercel) for secure static asset delivery, DNS routing, and DDoS mitigation.
  • Meeting Scheduling: Calendly LLC, used to facilitate calendar bookings for discovery sessions.
  • Email & Workspace Collaboration: Google Workspace (Google LLC) for encrypted business email transmission (sam@unifystudio.co).

7. Data Retention & Security

We retain personal data only for the duration required to achieve the purposes outlined in this policy, unless a longer retention term is required or permitted by statutory tax, fiscal, or commercial law (typically 5 to 7 years for executed client contracts). Technical server access logs are automatically rotated and purged after 30 to 90 days.

We implement state-of-the-art security measures to safeguard data against unauthorized access, destruction, alteration, or disclosure, including end-to-end TLS 1.3 encryption in transit, strict SSH key-based access protocols, zero-trust infrastructure boundaries, and multi-factor authentication across all engineering workflows.

8. Your Privacy Rights

Regardless of your geographic location, we respect your comprehensive privacy rights under GDPR, CCPA, and equivalent regional legislation. You possess the right to:

  • Access: Request confirmation of whether we process your personal data and obtain a readable copy of that information.
  • Rectification: Request correction of inaccurate, incomplete, or out-of-date records.
  • Erasure ("Right to Be Forgotten"): Request the permanent deletion of your personal data where retention is no longer justified.
  • Restriction of Processing: Request that we limit processing activities under certain contested conditions.
  • Data Portability: Receive your provided data in a structured, commonly used, machine-readable format.
  • Objection: Object at any time to processing based on legitimate interests.
  • Non-Discrimination: We will never discriminate against you or degrade technical service levels for exercising any privacy right.

To exercise any of these rights, email our team directly at sam@unifystudio.co. We verify applicant identity and respond within 30 days without charge.

9. International Data Transfers

As a digital studio operating globally, technical infrastructure and communications may cross jurisdictional borders. Whenever data originating within the European Economic Area (EEA) or UK is transferred to infrastructure located outside the EEA, we ensure appropriate safeguards are established—specifically European Commission Standard Contractual Clauses (SCCs) or adequacy decisions.

10. Children's Privacy

Our web engineering and technical consulting services are exclusively intended for commercial enterprises and adult professionals. We do not knowingly solicit or collect personal information from individuals under the age of 18. If you believe a minor has submitted personal data to us, please notify us immediately at sam@unifystudio.co and we will expunge the records.

11. Changes to This Policy

We may periodically revise this Privacy Policy to reflect technical infrastructure updates, evolving privacy regulations, or modified engineering offerings. Any modifications will be posted to this page with an updated "Last updated" date at the top of the document. We recommend checking this page intermittently to remain informed.

12. Contact Information

If you have questions, inquiries, or requests regarding this Privacy Policy or our data governance practices, please reach out to our primary contact: