Privacy & cookies.

What we do not collect

There are no contact forms, no sign-ups, no newsletter and no comment fields anywhere on this site. Nothing you type is sent to us, because there is nothing to type into. If you email us at the address on this site, we hold that email as we would any other correspondence — we do not add it to a mailing list.

Typefaces are served from this site’s own servers, not from Google Fonts, so simply reading a page does not announce your visit to a font provider.

Analytics cookies

We would like to understand which work people look at, so we can make the site better. To do that we use analytics tools that set cookies and record anonymised usage — which pages are opened, how long they are read, roughly where in the world visitors are, and which device they use.

None of it loads unless you accept. On your first visit a banner asks; if you decline, no analytics script is ever downloaded and no cookie is set. If you accept, the tools below may run. You can change your mind at any time — the control at the end of this page reopens the choice, and declining removes what was loaded.

• Google Analytics 4

  Aggregate audience and page statistics. Provided by Google.

• Google Tag Manager

  Loads and manages the tags listed here. Provided by Google.

• Meta Pixel

  Measures whether people who saw our work on Facebook or Instagram came here. Provided by Meta.

• Microsoft Clarity

  Anonymised heatmaps and session replay showing how pages are scrolled and clicked. Provided by Microsoft.

These are third-party services: once loaded with your consent, the data they gather is handled under their own privacy policies, and may be processed outside the EEA.

Films

Case studies include films hosted on YouTube and Vimeo. They are not loaded when you open a page — you see a still card with a play button, and the video provider is only contacted when you press play. YouTube films use the privacy-enhanced youtube-nocookie domain. Pressing play means that provider receives your IP address and can set its own cookies, under its own policy.

Hosting

The site is hosted on Vercel, whose servers keep short-lived technical logs of requests (including IP addresses) to deliver pages and guard against abuse. This is ordinary web-server operation and happens for every website you visit.

Why we are allowed to do this

Analytics run on your consent — the legal basis under Article 6(1)(a) of the GDPR — which is why nothing loads until you accept and why you can withdraw it at any time. The server logs described above rest on our legitimate interest in keeping the site available and secure, under Article 6(1)(f).

We do not hold analytics data ourselves — it sits with the providers named above and is kept for the period set in their tools and policies. We do not sell data, and we do not use it to make automated decisions about you.

Your rights

Under the GDPR you may ask what personal data we hold about you, ask for it to be corrected or deleted, object to how it is used, or withdraw consent you have given. You may also complain to your national data-protection authority — in Malta that is the Information and Data Protection Commissioner. Write to us at either address below and we will answer.

Who we are

The data controller for this site is iD creative solutions, the creative arm of Image Diplomacy, working from a studio in Yangon and an EU base in Malta.

For anything in this notice, including requests about your data, write to info@imagediplomacy.com.

Back to the work →