Privacy
What we keep, why, and for how long.
This explains how 1Zero9 Studio looks after information about you when you contact us, send us a project brief or become a customer. Last updated 28 October 2026.
Who we are
1Zero9 Studio is the trading name of Stephen Cranfield, a sole trader in Dublin, Ireland. Stephen decides how your information is used, which makes him the “controller” under data protection law. Contact: onezeronine@gmail.com.
What we collect
- When you start a brief: your name and email address.
- In your brief: whatever you choose to tell us about yourself and your project, including any phone number, organisation, links, and logo or brand files you upload.
- If you become a customer: contact and billing details, what we agreed, and invoices.
- On this website: privacy-friendly visit counts that use no cookies and do not identify you.
Please do not put anything sensitive in a brief, such as health or financial details. We do not need it.
Why we use it, and our legal basis
- To reply to you and plan your project: this is taking steps at your request before a contract.
- To do the work and invoice you: this is performing our agreement.
- To keep tax and accounting records: this is a legal obligation.
- To keep our systems secure and stop spam: this is our legitimate interest in running a safe service.
We do not sell your information or use it for marketing without asking you. To help plan your project, we may paste the wording of your brief into an AI assistant. We leave out your name and phone number when we do, and doing so does not change who owns your content.
How long we keep it
- A brief you started but did not send: deleted 90 days after you last saved it.
- A brief you sent that we did not take forward: deleted 12 months after we last had contact, unless you ask us to keep it.
- Customers: kept while we work together.
- Invoices and payment records: kept for 6 years, because tax rules require it.
Deletion runs automatically every day. You can also ask us to delete your information at any time (see your rights below).
Who else handles it
We use a few companies to run the service. They act on our instructions and may not use your information for their own purposes.
- Vercel: hosts this website.
- Neon: the database where briefs and records are stored, in London, United Kingdom.
- Resend: sends the emails we send you.
Vercel and Resend may handle information outside the European Economic Area, and rely on approved safeguards such as the standard contractual clauses when they do. We do not otherwise share your information unless the law requires it.
Your rights
You can ask us to show you what we hold about you, correct it, delete it, limit how we use it, or give you a copy. You can also object to a use. Email us and we will reply within one month. If you are unhappy with how we handled something, you can complain to the Data Protection Commission in Ireland.
Websites we build for you
When we build a website for you, the people who use it are your visitors, and you are responsible for them as the organisation they dealt with. We handle their information on your behalf. See the ownership terms.