Privacy

Privacy Policy

This page explains what information this website collects, why it is collected, how it is used, and how to contact the studio about your information. It describes the site as it actually works, not as a template assumes it works.

Written in plain language by the studio. It is our processing statement, not legal advice, and should be reviewed by a professional if your circumstances or our tooling change. Last updated 29 September 2026.

The short version

No cookies, no analytics, no tracking, no accounts.
The form sends your enquiry to the studio and stores nothing on the website.
It carries the time it arrived and the IP address it came from, beside what you typed — nothing more.
Three parties are involved: Google Fonts for type, Vercel for hosting, Resend for email delivery.
Email you send is used to answer you and to deliver agreed work, and nothing else.

What this website is

This website is a set of pre-built pages with one exception: the project form on the Start a project page posts to a single endpoint hosted for the studio. There are no accounts, no login, no shopping cart, and no member area, and the studio runs no database behind these pages — that endpoint passes your enquiry on to an email service and keeps nothing of its own.

Information collected through the contact form

When you submit the project form, what you typed — name and email address, plus anything optional you added (business or project name, website link, the options you ticked, your description, goals, timeline, and notes) — is sent over HTTPS to the studio’s own endpoint. It checks the fields for length and validity, hands the message to an email delivery service, and stores nothing: no database row, no copy on the server, no profile built from it. The message then exists in the studio mailbox like any other email. Please do not include payment card numbers, government identification, or anything you would not want to exist in email.

What travels with your enquiry

Besides what you typed, the endpoint notes the time the enquiry arrived and the IP address the request came from, and puts both at the foot of the studio’s copy of the message. The reason is narrow: to recognise automated abuse and to answer you from the right timezone. No other device or browser information is collected, and neither value is written to storage on the website.

Email communication

Enquiries, whether sent through the form or written directly to hello@orivianstudio.com, are used to answer you, scope and deliver any agreed work, and keep a record of the conversation. Enquiry email is kept in the studio mailbox for as long as it is useful for serving the client or avoiding a duplicated relationship, and is deleted or archived out of the active mailbox on request. Personal data from enquiries is not sold, is not used for advertising, and is not shared with anyone except the studio’s hosting and email providers, who process it only to deliver the message.

Analytics tools

This website loads no analytics software. There is no traffic measurement, no visitor profiling, no session recording, and no advertising or conversion tracking on these pages. The host keeps technical logs of requests to the form endpoint for its own platform debugging, which is part of running any server-side code and is not used by the studio to follow visitors around. If analytics are ever added, this policy will be updated before the tool goes live, and a consent notice will be shown if the law where you live requires one.

Cookies and similar storage

This website sets no cookies, including on the form endpoint, whose responses carry no stored identifier. It does not use local storage, session storage, or indexed database storage to remember you between visits. The small script that runs on these pages reads one browser preference — whether you have asked for reduced motion — in order to decide whether to animate elements. That check happens in your browser and the result is never sent anywhere.

Third-party services

Three parties touch this site. The fonts are served by Google Fonts, so your browser requests files from fonts.googleapis.com and fonts.gstatic.com, and Google receives the technical data any web request carries, such as your IP address, the page address, and your browser type. The pages and the form endpoint are hosted by Vercel, which relays your submission to the studio’s code. The enquiry itself is delivered by Resend, an email service that receives the message content in order to place it in the studio inbox. The studio can be asked what each of these holds about you. Self-hosting the fonts would remove the Google Fonts request entirely, and that is the change to expect if this section is ever rewritten.

Links to other websites

The Work pages link to live client websites, and project screenshots show those sites as they appeared when captured. Those websites have their own operators and their own privacy practices. This policy covers only orivianstudio.com. Client names and screenshots appear with the studio’s own description of the work; any client logo, mark, or content remains the property of the client.

International transfers

The hosting and email delivery services named above operate from outside the Philippines, so an enquiry that goes through the form is processed in more than one country in the ordinary course of delivering a message. The studio relies on the same protections described here whichever system the message is sitting in, and does not transfer enquiry data anywhere else.

Data retention

Nothing from your enquiry is kept on this website, so there is no visitor store to retain or delete. Afterwards the copies are the studio mailbox and the delivery provider’s operational logs, which are kept for that provider’s own period and are outside the studio’s control — ask, and the studio will tell you what it can confirm. Enquiry and project email is retained as described above. If you ask the studio to delete correspondence about you, it will be deleted from the active mailbox unless a legal or tax obligation requires a specific invoice or contract to be kept, in which case the studio will tell you what must be kept and why.

Data security

Pages and the form endpoint are served over HTTPS. The endpoint only accepts the fields it documents, caps their length, and checks a hidden field that automated spam fills in and people never see. The studio mailbox is protected by a strong password and two-factor authentication, and the device it is accessed from is disk-encrypted and kept updated. The weak point is email rather than the website: it can be intercepted in transit at the provider level and is stored on more than one system. If you need to share something genuinely sensitive, ask for another method first.

Your rights

You can ask the studio what personal information it holds about you, ask for it to be corrected, or ask for it to be deleted; requests are answered from the mailbox and normally within 30 days. If you are in the Philippines, the Data Privacy Act of 2012 (Republic Act No. 10173) and the National Privacy Commission apply to this processing. If you are in the UK or the European Union, UK GDPR or GDPR rights may apply, including the right to lodge a complaint with your supervisory authority. This website does not knowingly collect information from children and is not directed at them.

Contact

Write to hello@orivianstudio.com with the subject line “Privacy” and describe what you want checked, corrected, or deleted. Include the email address the studio may have your message under, if you know it.

Policy updates

Changes are made by updating this page; the date at the top of the page and the footer show when it was last revised. Material changes to what is collected — a new analytics tool, a hosted form service, a CRM — will be described here before that tool is switched on. Last updated: 29 September 2026.

Questions about this policy? Contact the studio