Privacy

Unbuilt Studio operates unbuilt.studio and decides how the personal data described here is used. In data protection terms that makes us the data controller.

You can reach us at hello@unbuilt.studio.

Only what you hand us, plus the minimum our hosting needs to serve the site.

• The enquiry form: your name, email address, company if you give one, the services you tick, and whatever you write about your project.
• Email and messages: anything you send us directly, and our replies.
• Server logs: your IP address, browser and the pages requested, kept briefly by our hosting provider for security and diagnostics.
• Visit counts: Vercel Web Analytics records the page you view, the site that sent you, and your country, browser, operating system and device type. It sets no cookies and does not identify you. Repeat views on the same day are grouped using an anonymous hash that is discarded after 24 hours.

We do not run advertising trackers, we do not build profiles, and we do not sell or rent your data to anyone. Our analytics count visits in aggregate; they do not follow you across sites or keep anything that identifies you.

We rely on your consent when you choose to send us an enquiry, and on our legitimate interest in keeping the site secure and answering the people who contact us. If you are in the EU or UK those are the GDPR lawful bases. In Nigeria the equivalent grounds sit under the Nigeria Data Protection Act 2023.

Enquiries that do not become projects: two years, then deleted. Enquiries that do become projects: for the life of the engagement and seven years after, because tax and accounting rules require it. Server logs: as long as our hosting provider retains them, which is a matter of weeks.

A small number of providers, each only for the part they handle. They process data on our instructions and cannot use it for their own purposes.

• Vercel, our hosting provider, which serves the site, keeps server logs and runs our cookieless analytics.
• Our email provider, which carries the messages you send us.
• Our accountant, and where the law requires it a regulator or a court.

Some of these providers store data outside Nigeria. Where that happens we rely on their standard contractual protections. If you would rather your data stayed in a particular jurisdiction, tell us before you send anything and we will work out how.

At any time, and free of charge:

• A copy of what we hold about you.
• A correction, if something is wrong.
• Deletion, unless we are legally required to keep it.
• That we stop using it, or that you receive it in a portable format.
• That we stop entirely, where we are relying on your consent. Withdrawing consent does not undo what was lawful beforehand.

Write to us first at hello@unbuilt.studio and we will answer within 30 days. If you are not satisfied you can complain to the Nigeria Data Protection Commission. If you are in the EU or UK, complain to your national supervisory authority instead.

We update this page when what we do changes, not on a schedule. The date at the top is the last change. Last updated 13 September 2026.