Privacy Policy

“JOXI Studio” is the trade name we use to provide website-building services. The business is in active development: our operating legal entity is being finalised, and the entity name and registered address will appear here once completed. Until then, you can reach us at the email address on our Legal Contact page for any privacy or data-rights matter, and we will respond as required by applicable privacy law.

We may collect:

• Contact details you submit in our forms: name, email, phone number, country, city, languages.
• Business details for website projects or referrals: business name, type, address, links.
• Consent records: which checkboxes you accepted, when, and on which page.
• Technical data: IP address, browser type, and basic logs needed for security and abuse prevention.

We do not knowingly collect special categories of data (such as health, biometric, or financial account data) through our website forms.

• To respond to your request (e.g. send a website preview, review an agent application).
• To deliver and support the services we agreed on with you.
• To prevent fraud, abuse, duplicate or fake leads.
• To meet our legal, tax, and accounting obligations.

Where applicable law (such as EU/UK GDPR, India DPDP, or Thailand PDPA) requires a lawful basis, we typically rely on: your consent (where you actively check a box), the performance of a contract (e.g. building your website), our legitimate interests (e.g. preventing fraud), or compliance with legal obligations.

We may share data with service providers who help us run our business — for example, email hosting, payment processors, and customer-support tools — under appropriate confidentiality obligations. We do not sell personal data.

We operate internationally and may transfer data across borders to provide the service. Where required by law, we put appropriate safeguards in place for such transfers.

We keep personal data for as long as needed for the purposes described above and to meet legal, tax, or accounting requirements. We delete or anonymize data when it is no longer needed, subject to applicable retention obligations.

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent at any time. To exercise these rights, see our Data Deletion page or contact us via the Legal Contact page.

See our Cookie Policy for details on what cookies we use, when they are placed, and how you can manage your preferences. We do not load analytics or marketing cookies before you give consent.

Our services are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We use reasonable technical and organizational measures to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.

We may update this Privacy Policy. The “Last updated” date at the top of the page reflects the most recent version.

For privacy questions or data rights requests, see our Legal Contact page.