Privacy / Updated 12 October 2026
Privacy notice
How we handle information shared with Web Media Project.
Who is responsible
Web Media Project is the controller responsible for the personal information described in this notice. Use our contact form to ask about your information or this privacy notice. We’ll reply to the email address you provide.
Project inquiries
The inquiry form asks for your name, email address, and project brief. You can also provide a company or website, whether you're enquiring for a business or agency, and optional budget and timing details.
We use this information to review your inquiry, respond by email, prepare a proposal, and manage an agreed project. Please include only information needed to explain the work. Do not send passwords or sensitive personal information.
Why we use this information
When you ask about a project for yourself, we process the information needed to take steps at your request before a contract, or to perform an agreed contract (GDPR Article 6(1)(b)). For inquiries on behalf of a business or agency, our legitimate interest is responding to the requested business communication (Article 6(1)(f)). We also rely on legitimate interests to protect the website from abuse, and on legal obligations for records that applicable law requires us to keep (Article 6(1)(c)).
Providing inquiry information is voluntary. Your name, a working email address, and a short brief are needed for us to respond meaningfully. Company, budget, and timing information are optional. We do not use inquiries for advertising or make decisions with legal or similarly significant effects solely by automated processing.
Delivery and storage
Inquiries are sent to our studio mailbox through Purelymail. The website does not store submissions in an application database. Emails remain in the mailbox, and relevant project correspondence may be retained as needed for the inquiry, our working relationship, and applicable record-keeping obligations.
The website runs on our hosting infrastructure. Hosting and email providers process information needed to provide those services.
How retention is determined
We consider whether correspondence is still needed to answer the inquiry, carry out requested follow-up, deliver an agreed project, or resolve a question about that work. Records required for legal obligations or the establishment, exercise, or defence of legal claims may need to be retained beyond the working relationship.
Website requests and cookies
We use the client network address temporarily to limit repeated form submissions. These rate-limit records are held in server memory for ten minutes. Hosting infrastructure may keep technical request logs for operation and troubleshooting. Development preview access uses an essential signed cookie lasting up to 24 hours.
Optional analytics
If you accept optional analytics, Google Analytics measures visits, traffic sources, page use, project links, and successful project enquiries. Microsoft Clarity provides heatmaps and session recordings to help us improve the website. Contact pages and private previews are excluded from Clarity recordings. Our analytics events do not include your name, email address, or project brief. Advertising storage and personalization remain disabled.
These tools receive technical device, browser, and interaction data and may use cookies such as Google’s _ga and Clarity’s _clck and _clsk. Google Analytics cookies are configured to last up to six months; Clarity’s visitor cookie can last up to one year and its session cookie up to one day. We store your consent choice in your browser for six months. Neither tool loads before acceptance. Rejecting analytics does not affect the contact form.
You can withdraw consent using “Cookie settings” in the footer. Withdrawal stops further tracking and clears these website cookies; it does not erase data already processed. Analytics processing is based on consent (GDPR Article 6(1)(a)). Providers may process data outside the EEA under their applicable safeguards. See Google’s privacy policy and Microsoft’s privacy statement for provider practices and retention. Contact us to exercise your rights concerning information we control.
The Pause motion control stores your choice in browser session storage so it carries between pages during the current tab session. It is not sent to our server.
Your information
Depending on the processing and applicable law, you can request access, correction, deletion, restriction, or portability of your information, and object to processing based on legitimate interests. Use the contact form to make a privacy request or ask about information held about you. Include “Privacy request” in your message so we can identify it. We may need to verify your identity before handling a request.
You can also lodge a complaint with a data protection authority, including the authority where you live or work. In Romania, the supervisory authority is ANSPDCP.
External project links lead to other websites with their own privacy practices.