Contact and scope
The 404flow studio operates this website. Contact our team at the email below about your information or privacy rights. This notice covers this website; client projects may have separate notices.
What we collect
The enquiry form collects your name, email, optional company, service, indicative budget and project message. Required fields help us respond. The message widget stores your messages, any optional name, email or phone you provide, a conversation identifier and timestamps. Please do not send passwords, payment details or sensitive personal information.
Purpose and legal basis
We use enquiries to respond, discuss requirements and prepare proposals. The enquiry form and first chat message ask for consent for this processing; you can withdraw it by email. Processing connected with steps you request towards a project or an agreed project may be necessary for those pre-contractual steps or that agreement. An enquiry does not subscribe you to marketing.
Storage, providers and retention
Enquiries and messages are stored in our site database; management access is restricted to the authorised administrator. Hosting and database services use Sites and Cloudflare infrastructure. Direct emails are also handled by email providers. We do not sell your information. We retain conversations while needed for an enquiry, project or business or legal requirement; closed enquiries can be reviewed for deletion. Contact us about deletion, hosting location and applicable international-transfer arrangements.
Your rights
You may request access, correction, deletion or restriction, and portability or object where applicable. You may withdraw consent without affecting earlier lawful processing. We may need to verify your identity before sharing personal information. You may complain to Malta’s Information and Data Protection Commissioner or your local data protection authority.
Cookies and statistics
When you start a conversation, the widget sets the essential first-party flow_chat cookie to reconnect it on this device for up to 30 days. Removing it may stop the conversation reconnecting. Its expiry does not delete stored messages. Our own statistics count page views by path and day, not unique visitors. We do not add advertising pixels or marketing cookies. Infrastructure providers may process technical connection information to operate and protect the service.
External links and automated decisions
External portfolio sites have their own privacy notices. Workflow examples use illustrative data. Our enquiry and message features do not make automated eligibility decisions or decisions with legal effects.
Updates
Updated on 5 October 2026. We update this notice when our handling of information changes.