Legal

Privacy Policy

Last updated: September 24, 2026

1. Who we are

This website is operated by MURO agency (“MURO”, “we”,
“us”), a web design, development and marketing studio with offices in
Chicago, Illinois, USA and Warsaw, Poland.
You can reach us at
hello@muro.studio.

2. Information we collect

Information you give us

When you use our contact form or the quick-contact form, we collect the
details you type in: your name, email address, phone number, company
name, the service you are interested in, and your message.

Information collected automatically

Like most websites, our hosting infrastructure records technical data
such as your IP address, browser type, device, referring page and the
pages requested. We use it to keep the site secure and working.

Cookies and similar technologies

We use a small amount of browser storage that is necessary for the site
to work, and optional analytics only if you allow it. Details are in
the Cookies section below.

3. How we use your information

• To respond to your enquiry, discuss your project and send proposals.
• To operate, secure and improve the website, including preventing spam and abuse.
• To understand how the site is used, only where you have allowed analytics.
• To comply with legal obligations and to establish or defend legal claims.

We do not use your information for automated decision-making that has
legal or similarly significant effects, and we do not send marketing
emails unless you ask for them.

4. Legal bases (EEA and UK visitors)

• Consent when you submit a form and tick the consent box, and for optional analytics.
• Legitimate interests in running a secure website and replying to business enquiries.
• Steps prior to entering a contract when you ask us for a proposal.
• Legal obligation where the law requires us to keep or disclose information.

You can withdraw consent at any time without affecting earlier processing.

5. Who we share information with

We share personal information only with service providers that help us
run the website and handle enquiries, and only as needed for those
purposes:

• Telegram - form submissions are delivered to our team through a private Telegram bot.
• Hosting and infrastructure providers - to serve the website and store server logs.
• Content delivery providers - this site loads fonts from Google Fonts and scripts from jsDelivr, which means your IP address is sent to those providers when a page loads.
• Analytics provider - only if we enable analytics and you accept it.

We do not sell your personal information, and we do not share it
for cross-context behavioral advertising. We may disclose
information if required by law or to protect our rights.

6. International transfers

Our team works from the United States and Poland, and our providers may
process data in other countries. Where personal data from the EEA or UK
is transferred to a country without an adequacy decision, we rely on
appropriate safeguards such as Standard Contractual Clauses.

7. How long we keep information

• Enquiries that do not lead to a project: up to 24 months, then deleted.
• Information about clients: for the duration of the engagement and afterwards as required for accounting, tax and legal purposes.
• Server logs: typically no longer than 90 days.
• Your cookie choice: until you change it or clear your browser storage.

8. Your rights

EEA and UK residents (GDPR)

You have the right to access, correct, delete or restrict the use of
your personal data, to object to processing based on legitimate
interests, to data portability, and to withdraw consent. You may also
lodge a complaint with your local data protection authority; in Poland
this is the President of the Personal Data Protection Office (UODO).

California and other US states

Depending on where you live (for example California under the CCPA/CPRA,
or Colorado, Connecticut, Virginia, Texas and other states with privacy
laws), you may have the right to know what personal information we
collect and how it is used, to access and receive a copy of it, to
correct or delete it, to opt out of the sale or sharing of personal
information, and not to be discriminated against for exercising these
rights. As described above, we do not sell or share personal
information for advertising. Over the last 12 months we have collected
the categories “identifiers” and “contact information” (name, email,
phone number, company) and the content of your messages, for the
business purposes listed in section 3.

How to exercise your rights

Email hello@muro.studio with the
subject “Privacy request”. We may need to verify your identity, and an
authorised agent may submit a request on your behalf. We respond within
the time required by law (generally 45 days in the US and one month in
the EEA/UK). We honor the Global Privacy Control (GPC) browser signal as
a request to opt out of non-essential analytics.

9. Cookies and browser storage

We do not set advertising cookies. The site uses the following browser
storage:

You can change your choice at any time using “Cookie settings” in the
footer, and you can block or delete storage in your browser settings.

10. Children

This website is not directed to children under 16, and we do not
knowingly collect their personal information. If you believe a child has
sent us information, contact us and we will delete it.

11. Security

We use reasonable technical and organizational measures to protect your
information, including encrypted connections and limited internal
access. No method of transmission over the internet is completely
secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at
the top shows when it last changed; material changes will be highlighted
on this page.

13. Contact

Questions about this policy or your data:
hello@muro.studio.