How we handle your data. Briefly.

Squircle is the trading name of Squircle Studio Limited, a company registered in England and Wales (number 08284589) at 23 West St, Haslemere, Surrey GU27 2AB. We are the controller of the personal data described here. Questions about it go to hello@squircle.co.

When you request access. The request form asks for your email address. We record it with the date and whether the request was approved.

When you get in touch. The enquiry form asks for your name, work email and company, what you would like to build, your company size and an optional note. If you email us, we receive whatever you send. Either way we keep the conversation, including our replies.

When you visit. We count page views with Vercel Web Analytics, which records anonymised, aggregate figures such as the page, referring site, country and device type. It does not use cookies and does not identify you.

We use your access request to decide on it and, if approved, to email you a private link. We use your enquiry to reply to you, arrange a call and, if we work together, prepare a proposal. An AI service helps us sort enquiries and draft replies; a person reads and approves every reply before it is sent, and no decision about you is made automatically. Our lawful basis is our legitimate interest in answering people who contact us, and, once we agree to work together, taking steps to enter into a contract. We use analytics figures to understand which pages are useful. We never sell your data or use it for advertising.

Only the providers that run the site and handle enquiries, acting on our instructions:

• Vercel, which hosts the site and provides the analytics
• Cloudflare, which protects and speeds up the site
• Resend, which sends our replies and access links to you, and receives your emails to us
• Supabase, which stores access requests and enquiries
• Slack, where we review access requests and enquiries
• Anthropic, whose AI model helps us sort enquiries and draft replies
• Google Workspace, which hosts our email

Some of these providers process data in the United States. Where they do, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework or by the UK’s approved contract clauses.

We keep access requests and enquiries for up to two years, then delete them, unless we go on to work together. Client records are kept for as long as UK tax and company law requires, usually six years.

You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy to take elsewhere. Email us at the address above and we will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

If your access request is approved, the site sets one cookie that keeps you signed in. It expires 30 days after your last visit. It is strictly necessary for the site to work, so it needs no consent. We set no other cookies.

If we change this policy, we will update it here and change the date below.