Privacy Policy

Utu Nanna Studio (“Utu Nanna Studio,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have regarding your information.

This Privacy Policy applies to our website, services, and any communications between you and Utu Nanna Studio.

Who we are

Utu Nanna Studio is a web design and digital strategy studio based in Florida, United States. We create websites, digital experiences, branding, and related services for businesses and individuals.

If you have any questions about this Privacy Policy or how we process your information, please contact us at leah@utunannastudio.com.

Information we collect

Depending on how you interact with our website or services, we may collect the following information.

Information you provide

You may voluntarily provide information such as:

• Name
• Email address
• Phone number
• Company name
• Website URL
• Project details
• Messages and other information you choose to send through our AI assistant
• Billing information
• Any other information you choose to submit through contact forms, questionnaires, or email

Information collected automatically

When you visit our website, we may automatically collect information including:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Time spent on pages
• Referring website
• Date and time of your visit

This information helps us understand how visitors use our website and improve our services.

Cookies and similar technologies

Our website may use cookies and similar technologies to:

• Remember your preferences
• Improve website performance
• Analyze website traffic
• Measure marketing effectiveness
• Protect against fraud and abuse

Where required by law, we will obtain your consent before placing non-essential cookies on your device. You can control cookies through your browser settings at any time.

How we use your information

We use your information to:

• Respond to inquiries
• Answer questions and help identify which of our services may fit your project
• Provide our services
• Prepare proposals and contracts
• Process payments
• Deliver completed projects
• Communicate about your project
• Improve our website
• Monitor website performance
• Prevent fraud and maintain security
• Comply with legal obligations
• Send occasional marketing communications (only where permitted or with your consent)

You may unsubscribe from marketing emails at any time using the unsubscribe link or by contacting us.

Legal basis for processing (GDPR)

If you are located in the United Kingdom, European Economic Area (EEA), or another jurisdiction where GDPR applies, we process your personal information under one or more of the following legal bases:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Our legitimate business interests, provided those interests do not override your rights and freedoms

Sharing your information

We do not sell your personal information.

We may share your information only with trusted service providers who help us operate our business, including providers for:

• Website hosting
• Analytics
• Email services
• Payment processing
• Scheduling
• Customer relationship management (CRM)
• Workflow automation and AI response generation
• Cloud storage
• Security services

These providers process information only as necessary to perform services on our behalf and are contractually required to protect your information.

We may also disclose information if required by law or to protect our legal rights.

International data transfers

Utu Nanna Studio is based in the United States. If you access our website or use our services from the United Kingdom, European Economic Area (EEA), or another country outside the United States, your personal information may be transferred to and processed in the United States or other countries where our service providers operate.

Where required by applicable law, including the UK GDPR and EU GDPR, we implement appropriate safeguards for international data transfers. These safeguards may include Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or other approved transfer mechanisms.

By using our services, you acknowledge that your information may be transferred internationally in accordance with this Privacy Policy.

Data retention

We retain personal information only for as long as necessary to:

• Provide our services
• Meet legal and tax obligations
• Resolve disputes
• Enforce agreements

When information is no longer required, it is securely deleted or anonymized.

Security

We use reasonable technical and organizational safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your privacy rights

Depending on where you live, you may have rights regarding your personal information. These may include the right to:

• Access your information
• Correct inaccurate information
• Delete your information
• Restrict processing
• Object to processing
• Withdraw consent
• Receive a portable copy of your information
• Lodge a complaint with your local supervisory authority

To exercise your rights, please contact us using the contact information below.

UK and European privacy rights

If you are located in the United Kingdom or the European Economic Area, you have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Restrict or object to certain processing activities.
• Withdraw your consent at any time where processing is based on consent.
• Request a copy of your personal information in a structured, commonly used, machine-readable format.
• Lodge a complaint with your local data protection authority.

We will respond to valid requests within the timeframes required by applicable law.

California privacy rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), or other applicable California privacy laws. These rights may include:

• Knowing what personal information we collect
• Requesting deletion of personal information
• Correcting inaccurate information
• Receiving a copy of your information
• Limiting certain uses of sensitive information (where applicable)

Utu Nanna Studio does not sell or share personal information for monetary value.

Third-party services

Our website is deliberately light on third-party services. As of the effective date above, it uses:

• Vercel — website hosting and delivery. Vercel processes standard server request data, including your IP address, in order to serve the site.
• Fonts — the site’s typefaces are hosted with the site; viewing a page does not request them from Google.
• Supabase — stores Utu Nanna Analytics records when analytics is enabled and you have allowed tracking.
• Resend — delivers contact form enquiries to our business email.
• jsDelivr — delivers the version-pinned chat interface files when you choose to open the AI assistant. Like other content-delivery services, it receives standard request data such as your IP address.
• n8n — hosts and runs the workflow behind the AI assistant. When you open the assistant, it creates a random browser session identifier. Messages, the session identifier, and standard request data are sent to n8n Cloud so the conversation can work.
• OpenAI — generates the AI assistant’s replies from the messages and limited conversation context routed through our n8n workflow.
• An embedded project demo — one project on our Work page is shown as a live embedded preview hosted on Vercel. Loading that page contacts the embedded site directly.

The AI assistant is optional and does not load until you open it. Its answers are generated automatically and may be incomplete or inaccurate. Please do not use it to send passwords, payment details, health information, or other sensitive information. Contact Leah directly if you would rather not use the assistant.

We also use the following to run the studio. These may process information you choose to send us:

• Google Workspace — our business email.
• Stripe — payment processing. Payment-card details are submitted to Stripe and are not stored by us in full. Stripe may process transaction, fraud-prevention, device, and identity information under its own terms and privacy policy.
• Google Search Console — aggregated search performance for our own site. It does not collect information about you from this website.

When enabled and allowed by you, Utu Nanna Analytics records a random visitor identifier, sessions, landing pages, page views, selected clicks, referral domains and UTM campaign tags. If you submit an enquiry, its name and email can be connected to that journey to understand where leads came from. We do not send form field values in general page or click events, store raw IP addresses in analytics or use fingerprinting. General URL queries and fragments are excluded; campaign tags are retained. Providers maintain their own privacy policies. You can change your analytics choice in our Cookie Policy.

External links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external websites and encourage you to review their privacy policies.

Children’s privacy

Our services are intended for individuals aged 18 or older.

We do not knowingly collect personal information from children under the age of 13. If we become aware that such information has been collected, we will delete it promptly.

Do Not Track

Utu Nanna Analytics remains off when your browser sends Do Not Track or Global Privacy Control, even if you previously allowed analytics.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When changes are made, we will update the effective date at the top of this page. Material changes may also be communicated through our website or by email where appropriate.

Contact us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Utu Nanna Studio
Email: leah@utunannastudio.com
Website: utunannastudio.com