Skip to content
Book a call
Legal

Privacy Policy

Last updated: 11 October 2026

This page explains what information sigmastudioo.com collects, why we collect it and what we do with it. It covers this website only. If we work on a project together, how we handle project data is agreed in the proposal or contract for that project.

Who we are

Sigma Studio is a product design and development studio based in Dhaka, Bangladesh. We run this website, and we decide how the information sent through it is used.

If you have a question about your data, email us at [email protected].

What we collect when you contact us

Our contact form, our free design review form and our call booking form can ask for:

  • your name and email address
  • your company and its website
  • your budget range
  • your message
  • the time slot you pick for a call, and your timezone

We use this to reply to you, to set up your call and to keep the conversation about your project going. We store it in our own database, on our web hosting with Namecheap (shared hosting).

Spam protection

When you send a form, we keep a hash of your IP address. A hash is a scrambled code made from the address. We use it to stop spam and to limit how often a form can be sent. We don't store your actual IP address.

Our forms may also use Cloudflare Turnstile, a spam check run by Cloudflare. When it is turned on, Cloudflare looks at your browser to tell people apart from bots. Cloudflare's privacy policy applies to that check.

Emails and calls

We send email through Resend (resend.com), our email provider. These emails include:

  • a confirmation after you send a form
  • a booking invite with a calendar file, when you book a call
  • reminders 24 hours and 1 hour before your call

To deliver them, Resend receives your email address and the content of each email. Resend's privacy policy explains how they handle it.

Our calls happen on Google Meet. When you join a call, Google's privacy policy applies.

WhatsApp chat

The WhatsApp button opens WhatsApp with a message already written for you. Before WhatsApp opens, we save three things in our database: that message text, the page you were on, and any campaign tags in the page link (UTM tags). We keep this as a lead, so we know a chat was started and where it came from.

Once you are inside WhatsApp, you are using a service run by Meta. WhatsApp's privacy policy applies there.

Page statistics

We count page visits so we can see which pages people read. For each visit we save only:

  • the page you opened on our site
  • the website you came from, as a domain name only (for example, google.com)
  • whether your device is mobile or desktop

We don't save your IP address, and we don't use cookies for this. We don't use any third-party analytics tools or ad trackers. Visits from known bots are not counted.

Cookies

We only use the cookies the site needs to work:

  • a session cookie, which our forms need to work
  • a security cookie (CSRF token), which checks that a form was sent from our site and not from somewhere else
  • a login cookie for our own staff, used only in our admin area

We don't use advertising or tracking cookies.

Fonts and scripts

Our fonts and scripts are hosted on our own server. Loading our pages doesn't send requests to Google Fonts or other font services. The one exception is Cloudflare Turnstile, which loads from Cloudflare when it is turned on for a form.

Who else handles your data

We don't sell your data, and we don't share it with advertisers. The only outside services involved are the ones named on this page:

  • Namecheap hosts our website and database.
  • Resend sends our emails.
  • Google Meet is where our calls happen.
  • WhatsApp (Meta), if you choose to chat with us there.
  • Cloudflare Turnstile, if it is turned on for our forms.

Some of these are US companies, so your data may be processed outside Bangladesh and outside your own country.

How long we keep it

We keep your messages and booking details for as long as we need them to work with you or to keep talking about a project. If you ask us to delete your data, we will do it within 30 days of your request.

Your rights

You can ask us to:

  • show you the data we hold about you
  • correct anything that is wrong
  • delete it

To do any of these, email [email protected]. Please write from the email address you used with us, so we can find your details.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top.

Contact

Questions about this policy or your data: [email protected]. Sigma Studio, Dhaka, Bangladesh.