Privacy policy
Last updated · July 2026
Who we are
Octopus is a creative studio based in the Canary Islands, Spain. We are the data controller for the information described on this page. You can reach us any time at sales@octopuestudio.com.
What we collect
Two things, and nothing else:
- What you type into our contact form — your name, email address and message. It is delivered to our inbox and used for one thing: replying to you.
- Campaign context attached to your enquiry — when you send the form we also attach the campaign parameters in the URL you arrived with (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the referring page that sent you here, and the landing page you first opened. We do this so we know which campaign or link brought you to us. It travels with your message and is not used to profile you.
We don't sell your data, share it for marketing, or add you to any list you didn't ask for.
Legal basis
The legal basis for handling your contact form data — message and campaign context alike — is your consent, given when you send the form: GDPR Article 6(1)(a). You can withdraw it at any time by emailing us. The technical logs our hosting provider keeps rely on our legitimate interest in serving the site securely: GDPR Article 6(1)(f).
How long we keep it
We keep your enquiry for as long as we need it to answer you and, if we end up working together, to run the project — and in any case no longer than two years after our last contact. After that we delete it. Ask us to delete it sooner and we will.
Who else sees it
Two providers, both bound by contract to process the data only on our instructions: Web3Forms, which delivers the form to our inbox (form delivery processor), and Vercel, which hosts the site. Some of that processing may happen outside the European Economic Area (EEA); when it does, it is covered by the contractual safeguards those providers commit to for international transfers. Nobody else receives your data.
Cookies & analytics
This site sets no tracking cookies and runs no advertising pixels. We count page views with Vercel Web Analytics, which is cookieless and doesn't build a profile of you. Our hosting provider (Vercel) also keeps standard technical logs — IP address, browser type — to serve the site securely.
Your rights
Under the GDPR you have the right to request access to your data, its rectification if it is wrong, its erasure, the restriction of its processing, its portability to another provider, and to object to our processing of it. You can also withdraw your consent at any time — withdrawing it doesn't affect what we did before you withdrew it. Email sales@octopuestudio.com and it's done.
If you think we have got it wrong, you can complain to the Spanish data protection authority, the AEPD: www.aepd.es.
This page is provided for transparency and is not legal advice.