Privacy

We keep this short on purpose. If anything's unclear, email info@jigsawstudio.uk and we'll explain it.

What we collect

What you give us via the contact form (name, email, the project you're describing), standard server logs (IP, browser) used to keep the site online and rate-limit abusive traffic, and, if you accept them, the analytics and advertising trackers listed below. Those trackers see your IP address, your browser and the pages you look at here.

What we do with it

Form submissions go to our internal team (Jigsaw Studio) via an n8n workflow so we can reply, and we get an instant alert about each one on our phones, through Telegram, so we can ring you back quickly. We never sell your data. There is one case where we share it: if you accept advertising cookies, what you do on this site is sent to Meta, the company behind Facebook and Instagram, along with the email, name and phone number you give in our contact form, in coded form. We use that to measure our ads and show them to people who have already visited. That is the only marketing sharing we do, it only happens if you accept it, it never includes job applications, and you can withdraw at any time via “Cookie settings” in the footer.

Cookies, analytics and advertising

By default we store nothing on your device. We use Google Analytics 4 to understand, in aggregate, how people find and use the site, and it only sets cookies once you accept analytics in the cookie banner. Decline and no analytics cookies are stored; Google's measurement stays in a cookieless, anonymised mode. Advertising is a separate choice, and it is off unless you accept that too. You can change either choice at any time via “Cookie settings” in the footer.

If you accept advertising, we run the Meta pixel, a piece of code from Meta Platforms Ireland Limited, the company behind Facebook and Instagram. It records the pages you view here, the buttons and links you click, and whether you send an enquiry. It sends Meta the page address, the page you came from, your IP address, and your browser and device details, and it sets two cookies on your device: _fbp, which identifies your browser for 90 days, and _fbc, which records the ad click that brought you here, also for 90 days. Meta uses this to report on how our ads perform, to show our ads to people who have visited, and to build similar audiences. It may match the data to your Facebook or Instagram account, and it uses it for its own purposes as well, under its own privacy policy. The data goes to the United States under the UK extension to the EU-US Data Privacy Framework, backed by the standard contractual clauses and the UK addendum. Decline advertising and the Meta tag does not load at all, so nothing is sent to Meta.

If you accept advertising and send us an enquiry through the contact form, the pixel also sends Meta the email address, name and phone number you entered. Each one is hashed first, which turns it into a code before it leaves your browser. Hashing is not the same as anonymising: Meta uses the code to find a matching Facebook or Instagram account, so it can still be linked to you if you have one. This is Meta's automatic advanced matching. Your message itself is never sent. The pixel never runs on our careers page, so nothing you send us in a job application goes to Meta.

We also measure how quickly pages load and respond, using Vercel Speed Insights. This one runs for everyone rather than waiting for the cookie banner, because it stores nothing on your device: no cookies, no identifier that follows you between visits, nothing that says who you are. It records how fast a page rendered, along with the broad shape of the visit (device type, browser, country, connection speed), so we can find pages that are slow on real phones rather than on ours. If you would rather we did not, email the address above and we will exclude you.

The cookies, in full

Only cc_cookie is set before you choose. Everything else waits for you, and withdrawing a choice deletes the cookies that went with it. Vercel Speed Insights, above, sets no cookie at all, which is why it is not in this table.

Meta and us

For the Meta pixel, Jigsaw Studio Ltd and Meta Platforms Ireland Limited are joint controllers of the moment your data is collected and sent to Meta. We are responsible for asking your permission first and for telling you about it here. Meta is responsible for what it does with the data afterwards, including using it to personalise advertising, and for telling you about that in its own privacy policy. You can exercise your data protection rights against either of us. You can also control what Meta does with it in your Facebook or Instagram settings, under your ad preferences and “Off-Facebook activity”.

Who else sees your data

Google (Analytics, and Google Workspace for our email), Vercel (hosting and Speed Insights), the tools that carry an enquiry to us (n8n, Resend for email, Supabase for our client records and Telegram for the alert), and Meta (advertising, only if you accept it). Nobody else.

Who we are, and how long we keep things

Jigsaw Studio Ltd is the data controller, registered in Scotland with its registered office in Livingston, West Lothian. Email info@jigsawstudio.uk.

Enquiries: we keep them while we're talking and for two years after, then delete them. Analytics: Google keeps event data for 14 months. Advertising: Meta keeps its event data for up to 180 days. Your cookie choice sits on your own device for 182 days, and then we ask again.

Your rights

You can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to limit what we do with it, or object to it. Email the address above and we'll do it within a working week. You can change or withdraw your cookie choices at any time via “Cookie settings” in the footer, and withdrawing is as easy as giving. Withdrawing doesn't undo what was lawful before you did it.

For the Meta pixel the event data itself sits with Meta rather than with us, so we can tell you what we did and what you agreed to, and then point you at Meta for the rest. If you're not happy with how we've handled something, you can complain to the Information Commissioner's Office at ico.org.uk.