Legal
Privacy policy.
What we collect, why, and how to make us stop. Written to describe what this website actually does, rather than to cover every eventuality.
Who we are
AndMelo is a creative studio based in London. For the purposes of UK GDPR we are the data controller for information collected through andmelo.com. You can reach us at hello@andmelo.com.
What we collect, and when
Nothing at all unless you do something. There is no account, no login, and no profile built in the background.
If you build a brief
The brief builder collects what you type into it: project type, brand or company name, timeline, budget band, your ambition for the work, any notes, and your name, email, phone, company and links where you provide them. It is submitted to Netlify Forms and emailed to us. We use it to reply to you and to scope the work.
If you use the contact form
Name, email, company, the discipline you are interested in, and your message.
If you subscribe to the monthly note
Your email address, and nothing else.
If you consent to analytics or marketing cookies
Standard analytics data: pages viewed, how far you scroll, which links you click, roughly where in the world you are, and what device you used. Where you consented to marketing, we also record which campaign or referrer brought you here, so we know which of our own efforts are working.
What we do not do
- We do not sell your data. There is no circumstance in which we would.
- We do not buy data about you from anyone else.
- We do not attempt to identify individual visitors from analytics.
- We do not send marketing to people who filled in a brief but did not ask for it.
Lawful basis
For enquiries and briefs, we process on the basis of legitimate interests: you contacted us about work, and replying is the obvious purpose. For the monthly note and for analytics and marketing cookies, the basis is consent, which you give explicitly and can withdraw at any time.
Who else sees it
We use a small number of third parties, and only for the job each one does:
- Netlify hosts the site and receives form submissions.
- Google Analytics measures how the site is used. Only with your consent.
- Meta and Google Ads measure advertising performance. Only with your consent.
- Microsoft Clarity records anonymised session behaviour so we can see where the site confuses people. Only with your consent, and sensitive input is masked.
- Stripe handles payment if you book the Audit. We never see or store your card details.
- Behold serves the Instagram feed, if it is switched on.
- Anthropic processes your message if you use Melo, our assistant, and it is running in conversational mode. Do not put anything confidential into a chat window, here or anywhere.
How long we keep it
Enquiries and briefs: for as long as there is a live conversation, and for up to three years afterwards so we have a record of who we have spoken to. Newsletter subscribers: until you unsubscribe. Analytics: according to the retention set in the platform, currently the default.
Your rights
Under UK GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to us processing it, or ask us to send it somewhere else. Email hello@andmelo.com and we will deal with it within a month. If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
Covered separately, in plain language, on the cookie policy.
Changes
If this policy changes materially we will update the date at the top and, where it matters, ask for consent again.
A note on this document. It describes what andmelo.com actually does, verified against the code rather than copied from a template. It is not legal advice, and if AndMelo's processing changes it needs revisiting.