Draft of 17 October 2026. This page is under legal review and can change before it is final.

Privacy notice

This notice explains what personal data this website collects, why I collect it, who receives it, how long I keep it and what rights you have.

Who I am

Demola Studio is a one-person business based in Lagos, Nigeria. I build booking systems for beauty businesses and photographers in the US, Canada, the UK and Ireland. I decide how the personal data on this website is used, so I am its controller.

To contact me about your data, email hello@demolastudio.com.

What this notice covers

This notice covers demolastudio.com only.

If you book with a business whose booking system I built, that business decides how your data is used. Its own privacy notice applies, and I process the data for it under a written agreement.

What I collect and why

When you ask for a free booking review. I collect your name, your email, your phone number if you add it, your type of business, the tools you use now if you add them, and your message. I use them to reply to you and to prepare your review. My lawful basis is that you ask me to take these steps before we agree any work.

When I check your email address. Before I save the form, I check that the domain of your email address can receive email. I look up the domain only. I do not contact your mailbox.

When you arrive through a referral link. If you open a link that starts with demolastudio.com/ref/, I save a cookie called demola-studio-referral for 90 days. It holds the code of the person who referred you, so that I can thank them if you become a client. It holds nothing about you.

When you give a testimonial. If I invite you to give a testimonial, I collect your name, your role, your business name, your location and your words. I publish them only if you give consent, and you can withdraw consent at any time by email.

When you use the website. I measure how people use the website so that I can improve it: the pages you visit, the buttons you click, errors and page speed. This measurement uses no cookies and stores nothing in your browser. My lawful basis is my legitimate interest in a website that works and is easy to use.

When you send the form. A bot check reads technical signals from your browser to stop automated spam.

When you email or message me. I keep the messages so that I can reply and keep a record of what we agreed.

Who receives your data

I do not sell your data. I share it only with the services that run this website for me:

  • Vercel: hosts the website, measures page visits and speed, and runs the bot check (United States).
  • Neon: stores the database with your form answers.
  • GitHub: stores the daily database backups for 30 days (United States).
  • Resend: sends me an email with your form answers (United States).
  • Telegram: sends me a message with your form answers, so that I can reply quickly.
  • PostHog: measures how the website is used (European Union).
  • Cloudinary: stores and serves the images on this website (United States).

If the law requires it, I can also have to share data with a court or a public authority.

Transfers outside your country

I work from Nigeria, so I read and manage your data there. The services above store it in the countries shown. When data from the UK or the European Union goes to a country without an adequacy decision, I use the safeguards that the law requires, such as standard contract clauses.

How long I keep your data

  • Booking review requests: 2 years after our last contact, unless you become a client.
  • Client records: for as long as we work together, then as long as tax and accounting law requires.
  • Testimonials: until you withdraw consent.
  • Database backups: 30 days.
  • The referral cookie: 90 days.

Your rights

You can ask me to give you a copy of your data, correct it, delete it, limit how I use it, or send it to you in a file that you can use elsewhere. You can object to how I use it, and you can withdraw a consent at any time.

Email hello@demolastudio.com to use these rights. I reply within one month.

You can also complain to the data protection authority where you live, for example the Information Commissioner's Office in the UK, the Data Protection Commission in Ireland, or the Office of the Privacy Commissioner of Canada. In Nigeria, the authority is the Nigeria Data Protection Commission.

Children

This website is for business owners. It is not for children, and I do not knowingly collect data about children.

Changes to this notice

When this notice changes, I update the date at the top of the page.