Privacy policy
Last updated: 7 November 2026
When you contact us
If you use our contact form or email us, we receive your name, email address and whatever you choose to tell us.
We use this information to respond to your enquiry and, if we end up working together, to prepare and carry out the project.
Where the GDPR applies, we rely on taking steps at your request before entering into a contract, performing a contract, or our legitimate interest in responding to enquiries, as appropriate.
We keep your messages for as long as reasonably necessary to handle your enquiry and any project that follows. Information we are legally required to retain, such as accounting records, is kept for the applicable statutory period.
Hosting and the contact form
Our website is hosted by Netlify, Inc., based in San Francisco, USA.
Netlify also processes submissions made through our contact form and forwards them to us by email.
When you visit the website, technical information such as your IP address, browser details and the time of your visit may be processed to deliver the website, maintain its performance and protect it from misuse.
Some of this information may be processed in the United States or other countries where Netlify and its service providers operate.
Netlify participates in the EU–US and Swiss–US Data Privacy Frameworks and provides contractual data protection safeguards, including standard contractual clauses where applicable.
You can find more information in Netlify’s privacy policy.
Our emails are handled by Zoho Mail, provided by Zoho Corporation B.V. in the Netherlands. Zoho processes your contact information and correspondence to deliver and store our emails.
Our mailbox is hosted in Zoho’s EU data centres, so our emails are stored within the European Union. If Zoho group companies outside the EU need access, for example for technical support, this is covered by the EU’s standard contractual clauses.
No cookies, no tracking
We don’t use analytics, advertising trackers or marketing cookies.
Our website doesn’t load third-party fonts or scripts. Its fonts and website scripts are served directly with the website.
To preserve the cursor position when you move between pages, your browser temporarily stores its position for the current tab. This information stays on your device and is removed when the tab is closed.
Your rights
You can contact us to ask what personal data we hold about you, request corrections or deletion, or object to certain uses of your data.
Depending on the applicable law and circumstances, you may also have rights to restrict processing or receive your data in a commonly used format.
To make a request, write to studio@spilledsoda.com.
If you have concerns about how we handle personal data, you’re welcome to contact us.
You can also contact the relevant data protection authority, including the Swiss Federal Data Protection and Information Commissioner (FDPIC), where applicable.
Changes
If the way we handle personal data changes, we’ll update this policy.
The date at the top shows when it was last updated.
Who is responsible
Spilled Soda is an independent design studio
run by:
studio@spilledsoda.com
We handle personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).