Security is part of how we build, not an afterthought. This page explains the practical steps we take to protect your data, your customers’ data and the systems we deliver.
We only collect the information we genuinely need to discuss and deliver your project, and we keep it only for as long as it is useful. Where information is stored, we use reputable services and sensible access limits so that project data is not left exposed.
We build with security in mind at every stage:
For online stores and any project that takes payments, we integrate trusted, industry-standard payment gateways. Card and payment details are handled directly by the payment provider on their secure, PCI-compliant infrastructure — we do not store raw card numbers on the sites we build.
Access to your systems, hosting and admin accounts is limited to the people who actually need it to do the work. We encourage strong, unique passwords and, where a platform supports it, two-factor authentication. When a project ends or a team member no longer needs access, that access is removed.
Software stays secure only when it is kept current. Under an agreed maintenance or support plan, we apply updates to the platform, plugins and dependencies, monitor for issues and take regular backups so your site or system can be restored if something goes wrong. Without an active plan, keeping software updated after handover is the site owner’s responsibility — we’re always happy to help.
Any files, content or credentials you share with us are used only for your project and are never sold or shared with unrelated third parties. If you need us to delete project data after completion, just ask and we will remove what we hold, subject to any records we’re required to keep.
If you believe you’ve found a security vulnerability in this website or in something we’ve built for you, we’d like to hear about it. Please reach out through the contact section or on WhatsApp with a clear description and, if possible, steps to reproduce it.
We’re a small, independent studio, so we don’t claim formal security certifications we haven’t earned. What we do promise is careful, practical security work and straight answers to any questions you have about how your project is protected.
Questions about security or this page? Reach us through the contact section of our website.