Legal
Privacy Policy
Last updated 9 September 2026
Who this covers
This policy applies to this website and is issued by Dalel Bacre Studio (arteNÓMADA), the operator of the site. It covers the public pages, the contact form, and the password-protected admin and client areas. Questions, corrections and deletion requests all go to dalelbacrecuevas@gmail.com.
What we collect
Only what you type into the contact form, and the ordinary technical records a web server keeps.
- Contact form. Your name, email address, organisation, the subject you pick and your message. The email address and the message are required; the rest are optional and blank if you leave them blank. There is no phone-number field.
- Server records. Standard request logs, and the number of submissions from an address so the form can be rate-limited against spam.
- Account holders. If the studio has given you a client login, we hold the username and a hashed password for it.
We run no analytics on this site — no Google Analytics, no advertising or social tracking pixels, no data brokers, no profiling. We do not buy, rent or import contact details from anyone.
Cookies and embedded video
We set one strictly necessary cookie of our own, dalel.sid, and only when
someone signs in to the admin or client area; it exists solely to keep that person signed
in. Browsing the public site is not enough to be given a cookie by us, and we set no
advertising or analytics cookies.
Films on this site are hosted by Vimeo and YouTube and play in an embedded player. Opening a page that contains one causes your browser to contact those services directly, which gives them your IP address, your browser details, the page you are on and the video you are watching — and they may set their own cookies in your browser, which are theirs and not ours. What they do with that is governed by Google's and Vimeo's own privacy policies, not this one.
Why we hold it, and for how long
Enquiries are kept so the studio can read and answer them, and so there is a record of a conversation that may become a booking. They are held in the studio's own database for as long as the working relationship or the enquiry remains relevant, and are deleted on request. The database is also backed up hourly, so a deleted enquiry can survive in those backups for up to 14 days after deletion before it ages out.
SMS and text-message notifications
The studio runs a small internal text-alert programme so a new enquiry is not missed. It is worth being precise about who it messages, because it is not visitors:
- The only recipient is the studio's own staff mobile number. The studio sets that number itself, in the site's hosting configuration, which only the studio can reach. Entering it there is the act of opting in, and no message is ever sent to a number that has not been entered there.
- We never send text messages to site visitors. Submitting the contact form does not sign you up for anything. A phone number is not a field on the form.
- Message frequency: one message per contact-form submission. In practice that is a handful a week and fewer than 10 on any day — it follows enquiry volume rather than a schedule, and we send no other texts.
- Message and data rates may apply.
- Reply HELP for help. Reply STOP to cancel; alerts end immediately. Removing the number from the site's configuration also ends them.
Mobile information is never shared with third parties. No mobile phone number and no SMS consent is sold, rented, shared or otherwise disclosed to any third party or affiliate for any purpose, and specifically not for marketing or promotional purposes.
The single exception is delivery itself: the number is passed to our messaging provider, Twilio, solely so that it can transmit the message. Twilio may not use it for any other purpose, and no other category of third party receives it.
Who else can see your data
We do not sell personal data, and we do not disclose it for anyone else's marketing. It is handled by a small number of service providers strictly so the site can function:
- Hosting — the application and its database run on Render.
- File storage and backups — images, films and documents are stored on Cloudflare R2, which also holds the hourly database backups described above.
- Email — enquiry notifications and password-reset messages are sent through the studio's own email provider.
- SMS — Twilio, as described above. The alert text carries the sender's name, organisation and subject so the studio knows who wrote in; it does not carry the message body.
- Video — Vimeo and YouTube (Google) receive your IP address and page context when a page with an embedded film loads, as described above.
- AI assistant — when the studio's admin assistant is switched on, the names and subjects of enquiries (never the message bodies, email addresses or notes) are sent to an AI provider so that it can help manage the site.
We may also disclose information where the law requires it, or to establish or defend a legal claim.
Your rights
Write to dalelbacrecuevas@gmail.com and you can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. If you sent an enquiry and would simply like it removed, say so and it will be.
Security
The site is served over HTTPS. The admin and client areas are behind a password, sessions are HTTP-only cookies, and the contact form is rate-limited. No system is perfect, but the amount of personal data held here is deliberately small.
Children
This site is not directed at children under 13 and we do not knowingly collect their information.
Changes
If this policy changes, the date at the top of the page changes with it.