Skip to content
SR Web Studio

Privacy policy

Last updated

Who we are

SR Web Studio is a small web studio in Gazipur, Bangladesh. We started in 2020 and work with clients around the world. We are the controller of the personal data described on this page.

Questions or requests about your data: support@srwebstudio.com.

This policy covers this website. It does not cover work we do for clients, which is described in Client data. It also does not cover orders on Fiverr, Upwork or Contra. Those platforms have their own privacy policies.

What we collect

The contact form

If you send us a message, we collect what you type into the form:

  • your name and email address
  • the service you are asking about
  • your budget range (optional)
  • your message
  • a link to your site or brief (optional)

We use this only to read your message, reply to you, and prepare a quote or answer your questions. We do not add you to a mailing list. We do not send an automatic reply.

Spam protection

The form is protected by Cloudflare Turnstile. Turnstile may look at signals from your device and browser to tell people from bots. Cloudflare handles that data under its own terms.

Website logs and analytics

Our hosting provider, Cloudflare, keeps technical logs when you visit, such as IP address, browser type and the pages requested. We do not control these logs. Cloudflare keeps them under its own terms.

We may turn on Cloudflare Web Analytics. It is cookieless. It gives us page views and general usage numbers. It does not follow you across sites and does not build a profile of you.

What we do not do

  • We do not set cookies on this site.
  • We do not use tracking cookies or ad trackers.
  • We do not sell your data.
  • Fonts are hosted by us, not loaded from a third party. Images are served from our own storage on Cloudflare R2 (media.srwebstudio.com).

Because we set no cookies, you will not see a cookie banner.

If you are in the EU or UK, the law asks us to name a legal basis. For the contact form, it is:

  • Steps before a contract. You ask us about a project, and we need your details to answer.
  • Legitimate interest. We have a reasonable interest in running the site, keeping it secure, blocking spam, and keeping a record of enquiries. We think this does not override your rights. You can object at any time.

Who handles your data

We use a small number of service providers (processors):

  • Cloudflare. Hosting, Turnstile, the D1 database where form messages are stored, Email Routing, R2 image storage and, if enabled, Web Analytics.
  • Google (Gmail / Google Workspace). When you send the form, a notification email goes to our studio inbox. When we reply to you, the emails pass through Google.

We share your data with others only if the law requires it, or if you ask us to, for example when you ask us to introduce you to a partner.

Transfers outside your country

We work from Bangladesh. Cloudflare runs a global network, and Google stores data in many countries. So your data may be handled outside the EEA and UK, including in Bangladesh and the United States.

In plain terms: if you write to us from Europe, your message leaves Europe. We limit what we collect, we use providers that publish their own security and data-transfer commitments, and we keep the data only as long as we need it. If you want more detail about the safeguards, write to us.

How long we keep it

Contact form messages are kept for up to 24 months. After that we delete them. If you want them deleted sooner, ask and we will do it.

If you become a client, we keep project records as needed to run the work and meet legal and tax duties. See Terms and Client data.

Your rights

Depending on where you live, you can ask us to:

  • tell you what data we hold about you (access)
  • correct data that is wrong
  • delete your data
  • stop using your data in a certain way (objection or restriction)
  • give you your data in a common format (portability)

To use any of these, email support@srwebstudio.com. We will reply within 30 days. We may ask you to confirm who you are before we act.

If you are in the EU or UK, you can also complain to your local data protection authority. We would like the chance to fix the problem first, but you do not have to contact us before you complain.

Local laws

Bangladesh. Bangladesh’s Personal Data Protection Act, 2026 applies to us. We handle personal data in line with it, including purpose, security and your rights of access, correction and erasure. Some parts of that law, such as the complaints process and fines, start at a later date set by the government.

EU and UK. For visitors from the EU and UK, we follow the main principles of the GDPR and UK GDPR, as described above.

Australia. As far as we understand it, the Australian Privacy Act 1988 exempts many small businesses, and we may fall under that exemption. We still follow the Australian Privacy Principles as good practice.

Other places. If your local law gives you more rights, tell us what you need and we will do our best to meet it.

Security

Messages travel over HTTPS. Access to the form data and the studio inbox is limited to the people who need it. No system is perfectly safe. If a breach affects your data, we will tell you promptly and say what we know.

Children

This site is for businesses and adults. We do not knowingly collect data from children.

Changes to this policy

We may update this page. The date at the top shows the last change. If we make a big change, for example adding a new provider, we will say so on this page.

Contact

SR Web Studio, Gazipur, Bangladesh support@srwebstudio.com