Privacy Policy

DrBaph — Digital Creative Studio based in the United Kingdom.

Last Updated: 03/03/2026

1. Who We Are

DrBaph is a Digital Creative Studio operating as a sole trader in the United Kingdom under the handle @drbaph. For the purposes of the UK General Data Protection Regulation (UK GDPR), we are the Data Controller for this website.

If you have any questions about this policy or how your data is handled, you can contact us directly at: dev@drbaph.com.

2. What Personal Data We Collect & Our Lawful Basis

We believe in data minimization and only collect the data strictly necessary to operate this site.

Contact Forms: When you submit a message via our contact form, we collect your name, email address, and the contents of your message.

Lawful Basis: We process this data under our Legitimate Interests to respond to your business enquiries and communicate with you effectively.

3. Analytics (Cloudflare)

We use Cloudflare Web Analytics to understand site traffic. This is a privacy-first analytics tool that does not use cookies, does not collect your IP address, and does not track you across other websites. No personally identifiable information (PII) is shared with third parties for advertising purposes.

4. Cookies

Because we use cookie-less analytics, this site does not set any tracking, advertising, or analytical cookies. We may only use strictly essential, functional cookies (such as security tokens required to submit forms), which do not require user consent under UK law.

5. External Links

This site contains links to our profiles on third-party platforms (Instagram, X, Telegram). If you click these links, you will be directed away from our site and will be subject to the privacy policies of those respective platforms. We do not control their tracking practices.

6. Who We Share Your Data With & International Transfers

We never sell your personal data. We only share it with trusted third-party service providers required to run our website:

• Web3Forms: Our contact form submissions are processed securely via Web3Forms.
• Cloudflare: Used for website security and anonymous traffic analytics.

Because these service providers are based outside the UK, your data may be processed internationally. We ensure these providers comply with UK GDPR standards through adequate legal safeguards, such as Standard Contractual Clauses.

7. How Long We Retain Your Data

Contact form submissions are retained only as long as reasonably necessary to resolve your enquiry or maintain an active business relationship. Once your enquiry is resolved and no further communication is needed, your data is securely deleted.

8. Your Rights Under UK GDPR

You have complete control over your personal data. Under UK law, you have the right to:

• Access the personal data we hold about you.
• Rectify any inaccurate or incomplete data.
• Erase your personal data from our records (the "Right to be forgotten").
• Restrict or Object to our processing of your data.

To exercise any of these rights, please email us at dev@drbaph.com.

9. Complaints

If you are unhappy with how we have handled your personal data, we ask that you contact us first at dev@drbaph.com so we we can make it right. However, you also have the right to lodge a formal complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) at https://ico.org.uk.