Drism Ltd ("Drism", "we", "us") is a digital agency based in Manchester, UK. This policy explains what personal data we collect through this website, why, and what rights you have over it.
The only personal data we collect through this site is what you give us directly via the contact form and the project brief form:
The contact form collects:
The project brief form (the step-by-step "Start a project" page) collects:
We also use privacy-first website analytics to understand how the site is used overall (see "Analytics" below). We don't use advertising cookies, tracking pixels, or session recording anywhere on this site.
We use contact form and project brief data solely to respond to your enquiry and, if it leads somewhere, to deliver work for you. Our legal basis is legitimate interest (responding to enquiries you've chosen to send us) and, where a project goes ahead, performance of a contract.
Submissions from both forms are stored in a database on our own server. We also use two third-party services to operate these forms:
We don't sell, rent, or share your data with anyone else.
We use Umami, a privacy-first analytics tool that we host ourselves, so your visit data never goes to a third-party company. It tells us aggregate information like which pages are popular, how visitors found the site, and roughly how long people spend on a page, using: page URL, referring site, browser/device type, screen size, and approximate country (derived from IP address, which is not stored).
Umami does not use cookies, does not track you across other websites, does not build an individual profile of you, and cannot identify who you are. Data is only ever viewed by us in aggregate.
This site sets one cookie: a session cookie used to protect the contact form against forged submissions (CSRF protection). It's strictly necessary for the form to work, contains no tracking data, and expires when you close your browser. Our analytics (above) sets no cookies at all.
We keep contact form and project brief submissions for as long as reasonably necessary to respond to your enquiry and, if we work together, for our business and accounting records. If you'd like your data deleted sooner, just ask (see "Contact us" below).
Under UK GDPR, you have the right to:
To exercise any of these, email us at the address below.
If we change what we collect or how we use it, we'll update this page and revise the date at the top.
Questions about this policy or your data: hello@drism.co.uk