Privacy Policy

Studio Squat is a small design practice, not an advertising business. We don’t sell personal data, we don’t share it with advertisers, and we don’t build profiles of the people who visit this site. The only personal data we hold is what you deliberately give us: your email address, if you write to us or subscribe to our newsletter.

Studio Squat Sdn Bhd 202301010896 (1504817-M) (“we”, “us”) operates squat.today. For anything relating to your personal data — including a request to see it, correct it, or delete it — write to desk@squat.today.

If you email us. Your address and whatever you write in the message. We use it to reply and to keep a record of the conversation. We keep project correspondence for as long as the working relationship lasts, plus a reasonable period afterwards for our own records.

If you subscribe to the newsletter. Your email address is passed to Substack, which runs the newsletter and stores the subscriber list. We don’t keep a separate copy. You can unsubscribe from any issue using the link at its foot, which removes you from that list entirely. Substack has its own privacy policy governing what it does with subscriber data.

If you browse the site. We use Google Analytics to understand which pages people read and roughly where visitors come from. It sets cookies in your browser and collects your IP address, approximate location, device and browser type, and the pages you visit. We look at this in aggregate — how many people read a case study, not who read it. Google processes this data on our behalf under its own terms.

This site uses cookies set by Google Analytics, described above. You can block or delete them in your browser settings at any time; the site works normally without them. We use no advertising, retargeting, or social-media tracking cookies.

If you’re visiting from the UK, EU, or Switzerland, these cookies are off by default and a banner asks first — nothing is set until you accept. Everywhere else, where analytics cookies don’t require opt-in consent, they’re on from your first visit, same as any standard-analytics site.

We use a small number of third-party services to run this practice, and your data touches them only where the relevant section above says so: Substack (newsletter delivery), Cal.com (booking calls, if you use the “Book a Call” link — the details you enter there are held by Cal.com), our email provider, and our hosting provider. We don’t sell or rent personal data to anyone, ever, and we don’t share it beyond what’s needed to deliver the thing you asked for.

You can ask us what personal data we hold about you, ask us to correct it if it’s wrong, or ask us to delete it. You can withdraw consent to marketing at any time — unsubscribing from the newsletter does this immediately. Depending on where you live you may have further rights under local data protection law, including Malaysia’s Personal Data Protection Act and, if you’re in the EU or UK, the GDPR. Whichever applies, write to desk@squat.today and we’ll deal with it. We aim to respond within 30 days.

We keep personal data only as long as it’s useful for the purpose it was given — newsletter subscribers until they unsubscribe, project correspondence for the life of the engagement and a reasonable period after. We take sensible precautions to protect it, though no method of transmission over the internet is completely secure and we can’t guarantee absolute security.

If our practices change we’ll update this page and change the date at the top. Material changes affecting how we handle data you’ve already given us will be communicated directly where we can reach you.