Privacy Policy
Last updated 28 September 2026
The short version
Studio Squat is a small design practice, not an advertising business. We don’t sell personal data, we don’t share it with advertisers, and we don’t build profiles of the people who visit this site. The only personal data we hold is what you deliberately give us: your details, if you write to us, send us a project enquiry, or subscribe to our newsletter.
Who we are
Studio Squat Sdn Bhd 202301010896 (1504817-M) (“we”, “us”) operates squat.today. For anything relating to your personal data — including a request to see it, correct it, or delete it — write to desk@squat.today.
What we collect, and why
If you email us. Your address and whatever you write in the message. We use it to reply and to keep a record of the conversation. We keep project correspondence for as long as the working relationship lasts, plus a reasonable period afterwards for our own records.
If you send a project enquiry. Through the Start a Project form we collect your name, email address, phone number if you choose to give it, the services and budget range you choose, your message, and the page you sent it from, along with how you first found the site (for example a search engine, Instagram, or a direct visit), the first page you landed on, and the pages you viewed before writing. It is stored privately in Sanity, the content platform this site runs on, and emailed to us through Google so we can reply. We use it only to respond to you and, if we work together, to run the project. We keep it on the same terms as project correspondence above.
If you subscribe to the newsletter. Your email address, the date, and the page you signed up on are stored in a private Google Sheet that only we can access, and privately in Sanity. We use it only to send you our newsletter. To be removed, reply to any issue or write to us, and we’ll delete your address.
If you browse the site. We use Google Analytics to understand which pages people read and roughly where visitors come from. It sets cookies in your browser and collects your IP address, approximate location, device and browser type, and the pages you visit. We look at this in aggregate — how many people read a case study, not who read it. Google processes this data on our behalf under its own terms.
Cookies
This site uses cookies set by Google Analytics, described above. You can block or delete them in your browser settings at any time; the site works normally without them. We use no advertising, retargeting, or social-media tracking cookies.
If you’re visiting from the UK, EU, or Switzerland, these cookies are off by default and a banner asks first — nothing is set until you accept. Everywhere else, where analytics cookies don’t require opt-in consent, they’re on from your first visit, same as any standard-analytics site.
Who else sees your data
We use a small number of third-party services to run this practice, and your data touches them only where the relevant section above says so: Sanity (stores project enquiries), Google (our email, and the newsletter list), Cal.com (booking calls, if you use a “Book a call” link — the details you enter there are held by Cal.com), and our hosting provider. We don’t sell or rent personal data to anyone, ever, and we don’t share it beyond what’s needed to deliver the thing you asked for.
Your rights
You can ask us what personal data we hold about you, ask us to correct it if it’s wrong, or ask us to delete it. You can withdraw consent to marketing at any time — asking to leave the newsletter does this straight away. Depending on where you live you may have further rights under local data protection law, including Malaysia’s Personal Data Protection Act and, if you’re in the EU or UK, the GDPR. Whichever applies, write to desk@squat.today and we’ll deal with it. We aim to respond within 30 days.
Security and retention
We keep personal data only as long as it’s useful for the purpose it was given — newsletter subscribers until they unsubscribe, project enquiries and correspondence for the life of the engagement and a reasonable period after. We take sensible precautions to protect it, though no method of transmission over the internet is completely secure and we can’t guarantee absolute security.
Changes to this policy
If our practices change we’ll update this page and change the date at the top. Material changes affecting how we handle data you’ve already given us will be communicated directly where we can reach you.