This site collects as little as possible: what you send me through the contact form, and anonymous visit counts. No advertising, no tracking, nothing sold.
01Who is responsible
The controller of your personal data is Benjamin Littin, working as Decoded Design Studio, Santiago, Chile. For anything about your data, write to [email protected].
02What I collect
- Contact form. Your name, email address, project type and message.
- Email. Whatever you include if you write to me directly.
- Technical data. When you load the site, the hosting provider receives your IP address, browser type and the time of the request. This is needed to deliver the pages and protect the site from attacks.
- Visit statistics. Anonymous, aggregated counts such as pages viewed, country and referring site. They don't identify you.
Giving your details is voluntary. Without an email address I can't reply.
03Why, and on what basis
- To reply to you and prepare a quote you ask for. Steps you request before a possible contract (GDPR Art. 6(1)(b)), and my legitimate interest in answering messages (Art. 6(1)(f)).
- To run and secure the site. My legitimate interest in a working, safe website (Art. 6(1)(f)).
- To understand how the site is used. My legitimate interest, using anonymous statistics only (Art. 6(1)(f)).
I don't use your data for marketing, I don't send newsletters, and I don't make automated decisions about you. If you are in Chile, your data is also handled under Law 19.628 and, from 1 December 2026, Law 21.719.
04Who else handles it
A few service providers process data on my behalf, only to run these services:
- Cloudflare, Inc. (USA): hosting, security, visit statistics and email forwarding (Email Routing).
- Formspree, Inc. (USA): delivers the contact form and the project form to my inbox.
- Google LLC (USA): my email inbox, through Gmail.
I don't sell or share your data with anyone else.
05Transfers abroad
I work from Chile and the providers above are based in the United States, so your data is processed outside the European Union. Where these providers transfer data from the EU, they rely on recognised safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
06How long I keep it
- Messages and enquiries: up to 12 months after our last contact.
- If we work together: for the duration of the project, then for as long as tax and accounting law requires.
- Technical logs: for the short periods set by the hosting provider.
07Cookies
This site doesn't use cookies for analytics, advertising or tracking, so there is no cookie banner. Visit statistics are counted without cookies. The site saves one small setting in your browser to remember whether you prefer the grid or list view in Works. It holds no personal data, and you can clear it any time in your browser settings.
08Your rights
You can ask me to:
- show you the data I hold about you, and give you a copy;
- correct it if it's wrong;
- delete it;
- limit how I use it, or object to its use;
- send it to you or someone else in a portable format.
Write to [email protected]. I'll reply within one month.
09Complaints
If you think your data has been mishandled, please contact me first. You also have the right to complain to the data protection authority in the EU country where you live or work, or in Chile, to the Personal Data Protection Agency (Agencia de Protección de Datos Personales) once it begins operating.
10Changes
If this policy changes, the new version will be posted here with a new date.