How we handle your data

Privacy Policy.

Last updated 2 November 2026 · Obliqua Digital Solutions Private Limited

01Who we are

This website, studio-ampersand.in, is run by Obliqua Digital Solutions Private Limited, Unit 706, 7th Floor, Om Tower, 32 Chowringhee Road, Park Street, Kolkata, West Bengal 700071, India ("Studio Ampersand Dot", "we", "us"). We decide how and why your personal data is used, which makes us the "controller" under the EU and UK GDPR and the "data fiduciary" under India's Digital Personal Data Protection Act, 2023.

For anything about your data, write to hello@studio-ampersand.in. We read every message.

02What we collect

We only collect what you choose to give us, and what we need to deliver the work:

  • Enquiries and briefs: your name, email, brand or company, project details, timeline and rough budget, when you email us or use the brief form (which opens your own email app).
  • Call bookings: your name, email and anything you add when you book a call through Calendly.
  • Client work: contact details, billing details, and the brand materials, files and feedback you share during a project.
  • Technical data: our host, Cloudflare, processes your IP address and basic request data to deliver the site and protect it from attacks.

We do not use analytics, advertising cookies or tracking pixels on this website. Cloudflare may set a strictly necessary security cookie to tell people from bots; it is not used to track you.

We do not knowingly collect special-category data (such as health or religious beliefs). Please do not send it.

03Why we use it, and our legal basis

  • To reply to your enquiry and prepare a scope and price, as a step before entering a contract with you.
  • To deliver the work, manage the project and invoice you, to perform our contract with you.
  • To keep tax, accounting and business records, to meet our legal obligations.
  • To keep the website and our systems secure, which is in our legitimate interests.
  • Where we rely on your consent, you can withdraw it at any time.

We do not use your data for automated decision-making or profiling, and we do not send newsletters or marketing sequences.

04Who we share it with

We share data only with service providers who help us run the studio, under contracts that require them to protect it:

  • Cloudflare, for website hosting and security.
  • Calendly, for booking calls.
  • Our email and file-sharing providers, to communicate and exchange project files.
  • Payment, invoicing and accounting providers, and our professional advisers.

We may also disclose data if the law requires it. We never sell your personal data, and we do not "share" it for cross-context behavioural advertising as defined under California law.

05International transfers

Studio Ampersand Dot is based in India and most of our clients are not. When you work with us, your personal data is transferred to and processed in India, and in the countries where our service providers operate.

Where the GDPR or UK GDPR applies, we protect these transfers with appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, and our providers' own transfer mechanisms. Ask us for a copy of the relevant safeguards.

06How long we keep it

  • Enquiries that do not become projects: up to 24 months, then deleted.
  • Client and project records: for the length of our relationship, then as long as tax and accounting laws require (typically up to eight years).
  • Project files: kept so we can support you after handover, unless you ask us to delete them.

07Your rights

Depending on where you live, you can ask us to:

  • give you a copy of your personal data;
  • correct anything that is wrong or out of date;
  • delete your data;
  • restrict or object to how we use it;
  • send your data to you or another provider in a portable format;
  • withdraw consent you have given.

Write to hello@studio-ampersand.in. We reply within one month, and we will never treat you differently for using your rights. We may need to confirm your identity first.

EU and UK residents can also complain to their local data protection authority. California residents have the right to know, delete and correct, and to opt out of sale or sharing, which we do not do. Users in India can raise a grievance with us and, once the relevant provisions are in force, with the Data Protection Board of India, and may nominate someone to exercise their rights.

08Security

We use encrypted connections, access controls and reputable providers to protect your data. No system is perfect, but if a breach affects you we will tell you and the relevant authorities as the law requires.

09Children

Our services are for businesses. We do not knowingly collect data from anyone under 18.

10Changes to this policy

If we change how we use your data, we will update this page and the date at the top. For significant changes affecting current clients, we will tell you directly.

Also read our Terms.