This policy explains what the digiio website collects, why we need it, which outside services are involved and what you can ask us to do. We don’t use analytics, advertising or tracking tools ourselves. A few outside services are involved. YouTube may process information about your device and viewing, but only after you choose to play a film.
The website at digiio.com is run by digiio Ltd. We decide how the information described here is used, which makes us the “controller” under UK data protection law.
This policy covers the website and the messages you send us through it. It does not cover other websites we link to.
The form on the digiio Studio page asks for:
Every field is required, apart from the last day, which only applies if you choose a range of dates. We ask for these details so we can check availability, reply with pricing and arrange an initial conversation. We don’t use them for marketing.
Our lawful basis is legitimate interests: we have a genuine business reason to respond to a request you have chosen to send, and it is the kind of use you would expect. Where you are arranging a booking for yourself, we are also taking steps you have asked for before entering into a contract.
When you press send, your browser passes the details over an encrypted connection to our web server. The server checks them and sends them on as a single email to the mailbox we use for studio bookings. Your email address is included in the message itself, so we can reply to you. Nothing is saved in a database on the website. The request travels through our web host’s mail system and is then held by our email provider.
The form needs JavaScript to send. If you would rather not use it, email hello@digiio.com instead.
If you email us, including through the hello@digiio.com links across the site, we receive your email address and whatever you choose to include. We use it to reply and to deal with what you have asked about, on the basis of our legitimate interests.
The roles on Who we are ask applicants to email a CV and examples of their work. We use applications only to assess candidates for the role applied for. We don’t ask for sensitive information, such as health details, unless it is needed, for example to arrange a reasonable adjustment. If we do receive it, we only use it where UK data protection law allows.
Like any website, ours runs on a web server operated by our hosting provider. When your browser requests a page, the server receives technical information such as your IP address, the date and time, the page requested, the address of the page that linked to it, and your browser and operating system. The host may keep this in server logs for security, fault-finding and keeping the site running. We rely on legitimate interests for this.
We don’t use this information to identify visitors, and we don’t run analytics, advertising or tracking tools. The site’s fonts, images, scripts and the MapLibre map software are served from our own server. Only two third-party services are contacted directly by your browser: OpenFreeMap, for the map data on the digiio Studio page, and YouTube, only after you choose to play a film.
The map on the digiio Studio page is drawn with MapLibre, open-source software that we host ourselves. The map itself (the street data and label lettering) comes from OpenFreeMap, a free map service run by Hyperknot Software Kft. in Hungary, using data from OpenStreetMap.
Soon after that page loads, your browser requests the map files from OpenFreeMap. As with any web request, your IP address is used to deliver them. OpenFreeMap says it does not store IP addresses in its normal server logs, though it may log them temporarily to deal with a security problem, and that it may use Cloudflare to deliver its files. The map sets no cookies. See OpenFreeMap’s privacy policy.
The “Open in Google Maps” link is just a link. Nothing is sent to Google unless you follow it.
The film on Our work is hosted on YouTube. Until you press play, the page shows our own still image and makes no contact with YouTube.
When you press play, the player loads from youtube-nocookie.com, YouTube’s privacy-enhanced mode. YouTube then receives your IP address and information about your device and viewing, and may use cookies or similar technologies. Google decides how that information is used: see Google’s privacy policy.
The digiio website does not set any cookies of its own. We don’t use analytics, advertising or social media tracking, tracking pixels or device fingerprinting.
The only thing the site stores on your device is one setting in your browser’s local storage, named digiio:still. It is created only if you press the pause button on the home or Say hello hero, or “pause” in the footer of any page, and its only job is to remember whether you want the background motion stopped. It contains no personal information and is never sent to us. You can reverse it at any time with the same pause and play control, or remove it by clearing this site’s data in your browser.
The law allows a preference like this, which only changes how the site looks and behaves, to be stored without consent, so the site has no cookie banner. If you play a film, YouTube’s own cookies or storage may apply, as explained above.
We don’t sell your information or share it for marketing. It is handled by:
We may also disclose information if the law requires it, or to protect our rights or the safety of others.
OpenFreeMap is based in the European Union, and YouTube (Google) operates internationally, including in the United States. The UK recognises the European Union as protecting personal information adequately. For the United States and elsewhere, Google uses safeguards approved under UK law.
We keep booking requests, enquiries and the replies that follow for as long as we need them to handle your request and any work that comes from it. If no booking or work follows, we delete them within 12 months of our last contact. If we do work together, we keep the related correspondence for as long as our contract, accounts and legal obligations require.
We delete unsuccessful job applications six months after the role is filled, unless you agree to us keeping yours for future roles.
Server logs are kept by our host for as long as needed for security, fault-finding and operating the service, then deleted according to its retention schedule.
The site is served over an encrypted connection. The booking form checks that each request comes from our own site, accepts only the expected fields and rejects anything malformed. It also contains a hidden field that people never see: if it is filled in, the request is treated as automated and discarded. We don’t use any outside CAPTCHA service. When a request is rejected, the server records the reason in its error log, not the details you entered.
No system is completely secure, but we limit who can access your information to the people who need it.
Depending on the circumstances, UK data protection law gives you the right to:
To use any of these rights, email hello@digiio.com or write to us at the address above. Some rights only apply in certain situations; if one doesn’t, we will explain why. There is normally no charge. We may need to confirm who you are, and we will reply within one month.
If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
We will update this policy when the website or the way we handle information changes. The date at the top shows when it was last revised.