Privacy policy

What Raise Studio collects, why, and how to exercise your data rights. GDPR, CCPA and PIPEDA compliant, in plain English.

Last updated: November 11, 2026

This is the privacy policy for Raise Studio, operated by Duxica Corp. ("Raise Studio," "we," "us"). It explains what personal information we collect from visitors to raise.studio and how we use it.

We've written this in plain English. If anything's unclear, email us at [email protected] and we'll explain.

What we collect

Information you give us. When you fill out the contact form on our website, we collect:

  • Your name
  • Your email address
  • The message you write

We also note when you sent it and which page you sent it from.

Information collected automatically. To deliver the site and keep it secure, our hosting provider processes your IP address and basic request details (browser, device, the page requested). When you use the contact form, a security check confirms you're a person and not a bot; it looks at signals from your browser and device, not at who you are.

Only if you accept analytics cookies, our analytics tools also collect:

  • Basic browser information (browser type, device type, operating system)
  • Approximate location (country or region, derived from your IP address, never precise location)
  • Pages visited and time spent on each
  • The website that referred you to us
  • How you move through a page (scrolling and clicks), including recordings of visits in which anything you type is hidden

This is standard analytics: we use it to understand which pages are useful, not to track individuals.

Why we collect it

  • To respond to your inquiry. When you fill out the contact form, we use your name and email to reply and discuss whether we're the right design partner for you.
  • To keep the site secure. We use request details and the form's security check to stop spam and abuse.
  • To improve our website. Aggregate analytics help us understand which pages need work and how visitors find us.
  • To comply with legal obligations. In the rare case we're required to retain or share data by law.

We don't sell your data. We don't use it for advertising. We don't share it with third parties except the service providers listed below.

Who we share it with

We use a small number of services to operate our website. Each is bound by its own privacy policy, and where they handle personal data for us, by a data processing agreement with us:

  • Cloudflare: hosts our website, protects it from abuse and runs the contact form's security check. (cloudflare.com/privacypolicy)
  • Supabase: stores contact form submissions, in the European Union (Frankfurt, Germany). (supabase.com/privacy)
  • Resend: sends the emails the contact form triggers: our notification and your confirmation. (resend.com/legal/privacy-policy)
  • Google Workspace: handles our email replies to your inquiry. (policies.google.com/privacy)
  • Google Analytics: website analytics, only if you accept analytics cookies. (policies.google.com/privacy)
  • Microsoft Clarity: shows how visitors use our pages (clicks, scrolling, recordings of visits), only if you accept analytics cookies. (privacy.microsoft.com/privacystatement)

If we add new services, we'll update this list.

Your rights

You have the following rights regardless of where you're located:

  • Access: ask what data we have about you.
  • Correction: ask us to correct it.
  • Deletion: ask us to delete it.
  • Portability: ask for a copy.
  • Opt-out: ask us to stop using your data.

To exercise any of these, email [email protected]. We'll respond within 30 days. You can withdraw your consent to analytics cookies at any time under Cookie settings, at the bottom of every page.

If you're in the European Union or United Kingdom (GDPR), you also have the right to file a complaint with your local data protection authority. We process your data on the legal basis of legitimate interests (responding to your inquiry, keeping the site secure) and your consent (analytics cookies).

If you're in California (CCPA), you have the right to opt out of any data "sale", though as noted, we don't sell data.

If you're in Canada, you have rights under PIPEDA (the federal Personal Information Protection and Electronic Documents Act) and any applicable provincial privacy laws (such as BC's PIPA). You can file a complaint with the Office of the Privacy Commissioner of Canada or your provincial commissioner.

How long we keep your data

  • Contact form submissions: kept in our database and our email until 90 days after our last interaction, then deleted automatically, unless you've become a client, in which case the working relationship is governed by our separate service agreement.
  • Analytics data: Google Analytics keeps it for 14 months. Microsoft Clarity keeps recordings of visits for 30 days and other usage data for up to 13 months.
  • Security logs: our hosting provider keeps request logs for a short period to protect the site.

Cookies

  • Essential cookies: set by our hosting provider to keep the site and the contact form secure. They don't track you across other sites and don't need your consent.
  • Analytics cookies: set by Google Analytics and Microsoft Clarity, only if you accept them in our cookie banner. You can change your choice at any time under Cookie settings, at the bottom of every page.
  • Your cookie choice: if you accept, we remember it for 12 months; if you reject, we remember it for the rest of your visit and ask again next time.

We don't use advertising cookies. Our fonts and images are served from our own site, so loading a page doesn't contact other companies unless you've accepted analytics.

International data transfers

We're based in British Columbia, Canada. Contact form submissions are stored in the European Union (Frankfurt, Germany). Some of our providers (Cloudflare, Resend, Google and Microsoft) process data in the United States and other countries; they protect these transfers with standard contractual clauses or equivalent safeguards, such as the EU-US Data Privacy Framework.

Children's privacy

Our service is intended for business founders and is not for children under 16. We don't knowingly collect data from children. If you're a parent and believe we've collected data about your child, contact us and we'll delete it.

Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top reflects when. If we make significant changes, we'll note them clearly at the top of the page for at least 30 days.

Contact us

Questions about this policy, your data, or anything else? Email [email protected].

If you'd prefer to reach a specific person, our co-founders are listed on the About page.