Privacy Policy

Who is responsible for your data

Freakuency Studio (“we”, “us”) is the data controller for the personal data described here. We are a company registered in Dubai, United Arab Emirates. You can reach us about anything on this page at hello@freakuency.studio.

What we collect, and when

When you send an enquiry

The form at /contact asks for:

• Your name and email address: required, so we can reply.
• Organisation and what you're after (rental, custom or permanent): optional, used to route the brief internally.
• The brief itself: required. Whatever you choose to write. Please do not include anything confidential or any special category data in it; a first message does not need it.

The form also carries one hidden field that is never shown to you. It exists to catch automated submissions. If you are a person, it stays empty and we ignore it.

When you simply read the site

• Server logs. Our host records ordinary request data (IP address, browser user-agent, the page requested and the time) as part of serving the site and keeping it secure. We do not use these to build a picture of individuals.
• Rate limiting. When you submit the form, your IP address is held in the server’s memory for ten minutes so we can cap submissions from one address and stop the form being used to send spam. It is not written to a database and is discarded automatically.

Enquiries also appear in our server logs

We should be plain about this: when your enquiry is submitted, its contents (your name, email, organisation, engagement type and brief) are written to our hosting provider’s application logs as well as being emailed to us. That is a deliberate fallback so an enquiry is never lost if email delivery fails, but it does mean your message sits in two places. Those logs are retained by our host on their own schedule and are accessible only to us.

What this site does not do

• No cookies. The site sets none at all.
• No localStorage, sessionStorage or similar browser storage.
• No analytics, no tag manager, no pixels, no session recording, no heatmaps.
• No advertising, no remarketing, no data brokers, no profiling or automated decision-making.
• No third-party requests. Fonts are served from our own domain rather than Google Fonts, so loading a page tells nobody but us that you visited.
• We never sell or rent personal data, and we do not share it for anyone else’s marketing.

Because we set no cookies and run no tracking, there is no consent banner on this site. That is not an oversight: there is nothing to consent to.

Which law applies

We are established in the United Arab Emirates, so our processing is governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

We also work with clients in the United Kingdom and the European Economic Area, and this site invites enquiries from them. Where we process the personal data of people in the UK or EEA in connection with offering our services, UK GDPR and the EU GDPR apply to that processing as well. Where the two regimes differ we apply whichever gives you the stronger protection.

Our lawful basis

For enquiries, we rely on legitimate interests (Article 6(1)(f)): ours in answering people who ask us to, and yours in getting a reply. Where your message is about engaging us, on steps taken at your request before entering a contract (Article 6(1)(b)). For server logs and rate limiting we rely on legitimate interests in keeping the site available and free of abuse.

Who else can see it

We keep the list of processors deliberately short. Each acts on our instructions:

• Vercel: hosts the site and runs the form endpoint. Sees request data and the application logs described above.
• Resend: delivers the enquiry to us as an email. Sees the contents of your enquiry and your email address.
• Google Workspace: provides the mailbox that receives it, so your enquiry rests in our inbox like any other email.

We are based in the UAE and these providers operate internationally, so your data is processed outside the country you are in, including in the United States and the European Union. Where data protected by UK GDPR or the EU GDPR leaves the UK or EEA, the transfer relies on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses as incorporated in each provider’s terms. Transfers under UAE law are made on the bases permitted by Federal Decree-Law No. 45 of 2021.

We may also disclose data where we are legally required to. We will not do so otherwise.

How long we keep it

We keep enquiries for 12 months from our last contact with you, then delete them. Where an enquiry becomes a project, we keep the records for the life of the project and our normal business-records period afterwards.

Rate-limiting records are discarded after ten minutes. Server and hosting logs are kept according to our providers’ standard retention.

Your rights

Under UAE data protection law and, where it applies to you, UK or EU GDPR, you have the right to:

• ask what we hold about you, and get a copy;
• have inaccurate data corrected;
• have data erased;
• restrict how we use it;
• object to processing based on legitimate interests, including, at any time, an absolute right to object to direct marketing;
• receive data you gave us in a portable form.

Email hello@freakuency.studio and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You can also complain to a regulator: in the UAE, the UAE Data Office; in the UK, the Information Commissioner’s Office (ico.org.uk); in the EEA, the supervisory authority where you live or work.

Security

The site is served over HTTPS with HSTS, a Content Security Policy and related headers. The enquiry endpoint caps submission size and rate. No transmission over the internet is ever completely secure, but we keep the amount of data we hold small, which is the most effective protection available.

Children

This site is aimed at organisations commissioning work and is not directed at children. We do not knowingly collect data about anyone under 16.

Changes

If this policy changes we will update the date at the top of the page. This version is dated 8 September 2026.

Contact

Questions, requests or complaints: hello@freakuency.studio.