05Privacy
Privacy policy.
Last updated 30 September 2026. Plain language, no dark patterns.
Who we are
Mpala Studio (“we”) is an independent digital studio working with clients worldwide. [LEGAL ENTITY: registered name, country of registration and business address to be added before launch.] We run mpalastudio.com. For anything about your personal information, email hello@mpalastudio.com.
Person in charge of personal information
Our privacy officer, and the person in charge of the protection of personal information under Quebec law, is Wesley Mpala, Founder. Reach them at hello@mpalastudio.com with the subject “Privacy”.
What we collect and why
| Information | When | Why | Basis | Kept for |
|---|---|---|---|---|
| Name, email, company, what you need, your message | You send the contact form | Reply to your enquiry and scope a project | Your consent | 24 months after our last contact, or until you ask us to delete it |
| Name, email, company, message, chosen time, your time zone and language | You book a call | Put the call in our calendar, send you an invite with a video link, and prepare for it | Your consent, and steps you ask for before a contract | 24 months after the call, or until you ask us to delete it |
| Emails you send us | You email us | Reply and keep a record of the conversation | Your consent | 24 months after our last contact |
| Anonymous visit statistics: page viewed, referring site, country, device and browser type | Every visit | Understand which pages are useful and fix what isn’t | Legitimate interest; no personal profile is built | Per Vercel Web Analytics retention |
| Anonymous page-performance measurements: load time, layout shifts and interaction responsiveness | Every visit | Measure page speed and improve reliability | Legitimate interest | Per Vercel Speed Insights retention |
| Technical request logs (IP address, browser, pages requested) | Every visit | Security and keeping the site running | Legitimate interest | Per our web host’s log retention |
| Browser storage: page-transition state and connection speed | Every visit | Carry the page transition across pages and pick a lighter video on slow connections | Strictly necessary for features you use | Until you close the tab |
We only collect what you give us or what the site needs to work. We do not sell or rent personal information, we do not run advertising trackers, and this site sets no cookies. Our visit statistics (Vercel Web Analytics) are cookieless and do not identify you or follow you across other websites. Nothing on this site makes automated decisions about you.
Who handles it for us
- Google (Google Workspace, Gmail, Google Calendar and Google Meet) stores our email and calendar. Briefs from the contact form and call bookings arrive in our Google Workspace account; a booking also creates a calendar event and a Google Meet invite.
- Vercel hosts this website, keeps standard request logs and provides our anonymous visit statistics.
Only the Mpala Studio team members who need your information to reply to you or run your project can see it.
Where it is stored
Google and Vercel may store and process information outside your province or country, including in the United States. Before relying on them we assessed their security and contractual commitments, and they are bound by agreements that protect your information to a standard at least equivalent to the law that applies to you. Information may also be accessed by our team, wherever they are working.
How we keep it safe
Two-factor sign-in on our accounts, access limited to the people who need it, and no copies kept outside our Google Workspace. If a confidentiality incident creates a risk of serious harm, we will notify you and the relevant regulator as the law requires, and keep a record of it.
Your rights
Wherever you live, you can ask us to: tell you what information we hold about you and how we use it; correct it; delete it; give you a copy in a structured, commonly used format; or stop using it, by withdrawing your consent at any time. Email hello@mpalastudio.com with the subject “Privacy request”. We confirm within 5 working days and answer within 30 days, free of charge.
If you are not satisfied with our answer you can complain to the regulator where you live, for example:
- Canada (federal): the Office of the Privacy Commissioner of Canada
- Alberta: the Office of the Information and Privacy Commissioner of Alberta
- Quebec: the Commission d’accès à l’information du Québec
- South Africa: the Information Regulator
- Zambia: the Office of the Data Protection Commissioner
- European Union and United Kingdom: your national data protection authority
AI-generated media
Some imagery and background films on this site may be generated or edited with AI tools. No personal information is used to make them. The site has no AI chatbot.
Children
This site is not directed at anyone under 16 and we do not knowingly collect their information.
Languages
This policy is available in English, Spanish and French. If the versions differ, the English version prevails, except where the law requires the French version to apply.
Changes
We will update the date at the top whenever this policy changes, and tell you directly if a change affects how we use information you have already given us.