Legal notice

This site operates under the name Uniqe Studio, a design and engineering studio providing visual identity, interface design and web development.

The registered address and company details are published on the contact pages of this site, and that is where official correspondence goes. Anything sent through the site contact form or the support channel published here reaches the same team.

We collect what you type into the contact form: your name, your email address and the body of your message. We hold it because it is the reason we are writing to you, and we do not share it with any third party.

Creating an account stores your email address, your display name and an encrypted password. We never store the password itself and cannot recover it from what we hold.

A purchase stores the order id, its amount and its status. The payment provider handles your card details; we never see the card number and never store it.

We store the IP address and security logs for every request the site receives. Those logs exist to detect abuse, and we read them only when there is a report attached to one.

We use your data to perform the contract: opening your account, fulfilling your order, and delivering the service you asked for. That needs no separate consent, because it is what you asked for.

We use your data on the basis of your consent in exactly two cases: sending you the newsletter, and answering a question that did not come with a service order. Withdrawing consent stops those two uses only, and does not affect work you already paid for.

We do not sell, rent or trade your data with advertisers, at any time and for no purpose.

We keep your account data while the account is open, and delete it completely within thirty days of your request to close it.

Order records are kept for as long as tax law requires, which is how long we have to be able to prove a payment if one is questioned years later. That is longer than our support window, and not a choice we made.

Security logs are kept for ninety days and are then deleted automatically, with no manual review.

You can look at your data, correct it and delete it. From your dashboard you change your display name and password and delete the account outright, with no email and no justification required.

You can withdraw consent, and you can file a complaint with the supervisory authority in your country of residence if you believe your data is not being processed in line with the law.

We answer any request within thirty days. That is the limit the law sets, and it is also faster than we usually take.

Passwords are stored as a single salted hash, so the password cannot be recovered from it even if the entire database were dumped.

We use two-factor authentication. It is on for your account unless you turn it off yourself.

The site runs behind a firewall, and the pages carry a content security policy that blocks code from any external source we have not verified. That does not stop every breach, but it removes the largest class of them.

We keep order records and their amounts because they are the record that proves a payment went through, and because tax law requires us to keep them. The payment message itself is kept by the payment provider and does not reach us.

Amounts paid are not refundable. This is a fixed rule in our policy published on the payments page, not an exception we apply in some cases.

The payment record we keep does not give you a right to a refund of the amount; its purpose is to evidence the payment and answer any review, nothing else.

We update this notice when our services change or when the law we work under changes. The last-updated date is at the top of the page.

A change to how your data is used, or to how long it is kept, does not apply retroactively to data collected before it was published.