How ABY.ONL handles information

What this policy covers

What it does not cover

Information you provide directly

• Your name, email address, company or studio name, and anything else you include when you write to us.
• Project details, timelines, references, goals, attachments, and other materials you choose to share during an enquiry or collaboration.
• Administrative records connected to a project, such as contracts, invoices, or other business correspondence when work moves forward.

Information collected automatically

• Limited technical information made available by your browser, device, or hosting infrastructure, such as IP address, browser type, device information, pages visited, timestamps, and referring URLs.
• Basic diagnostic, security, and performance logs that help keep the site stable, available, and protected against abuse.
• Essential cookie-like data or local storage that may be used by the platform to make the site function properly, if applicable.

Information we do not intentionally request

• ABY.ONL does not require account creation for ordinary browsing.
• We do not intentionally ask visitors to submit sensitive personal information unless it is clearly necessary for a specific working relationship.
• Please do not send payment card details, government identifiers, health data, or other highly sensitive information through ordinary email unless a secure process has been agreed in advance.

How we use information

• To respond to enquiries, proposals, collaboration requests, and follow-up messages.
• To review whether a project is a fit for Saby, Naby, or the shared studio practice.
• To run, secure, improve, and troubleshoot the site and its hosting environment.
• To prepare proposals, agreements, invoices, and other materials if a project moves ahead.
• To comply with legal, accounting, tax, or record-keeping obligations.

Legal bases where required

• Your consent, where you have chosen to contact us or share information with us directly.
• Our legitimate interests in operating the site, preventing misuse, managing communications, and running a small studio practice responsibly.
• Steps taken at your request before entering into a contract, and performance of a contract if we begin working together.
• Compliance with applicable legal obligations.

Communication records

• We may keep records of enquiries, decisions, project notes, and email threads so we can continue a conversation accurately and maintain a reliable history of active work.
• Internal notes may be created to assess scope, timing, fit, and next steps, but we do not sell your enquiry data or treat it as a marketing list by default.

When information may be shared

• With service providers that help operate the site or business, such as hosting, email, cloud storage, analytics, accounting, or security tools, but only where reasonably necessary.
• With professional advisers, legal counsel, insurers, or accountants when needed for a legitimate business or legal purpose.
• With authorities or counterparties where disclosure is required by law, legal process, or to protect rights, safety, and the integrity of the site.
• As part of a business transition, only if the studio structure changes in a way that requires continuity of records.

Retention

• We keep personal information for only as long as reasonably necessary for the purpose for which it was collected.
• Enquiry records may be retained so we can continue a conversation, understand prior context, or maintain business records.
• Project-related records may be kept for longer where needed for contracts, accounting, legal compliance, or dispute management.
• Technical logs are retained according to operational and security needs, then deleted or anonymised when no longer required.

Security

• We use reasonable administrative, technical, and organisational measures intended to protect personal information from unauthorised access, misuse, or disclosure.
• No website, email channel, or storage system can be guaranteed to be completely secure, so please use judgment when sharing confidential material.
• If a more secure workflow is needed for a project, we can agree on a more suitable process during the conversation.

Your choices

• You may contact us to request access to, correction of, or deletion of personal information we hold about you, subject to applicable law and legitimate business needs.
• You may object to certain processing or ask that we limit it where the law gives you that right.
• Where processing relies on consent, you may withdraw that consent, although that will not affect processing already carried out.

Children and external services

Updates and contact