Privacy policy

Last updated 7 October 2026

This policy explains what personal information Baigo collects, why, who helps us handle it, and the choices and rights you have, wherever you live. We collect as little as we can and never sell it.

In short

We only collect what you send us, what we need to work together, and the basic technical data every website receives.
We don’t sell your information, share it for advertising, or add you to a mailing list.
Messages sent through the contact form are emailed to us and kept in our private studio inbox so we can reply.
We only count visits if you allow Analytics. The count uses no cookies, and there are no advertising trackers.
You can ask to see, correct, or delete your information at any time.

Privacy, data protection, and security: privacy@baigo.xyz
New projects and general questions: hello@baigo.xyz

01Who we are

Baigo is a development and design studio working with clients around the world. For the information described here, we are the controller: we decide why and how it is used.

Write to privacy@baigo.xyz with any question about your privacy, to exercise your rights, to request a data processing agreement, or to report a security issue.

02What we collect

What you send us. Through the contact form: your name, email address, message, and, if you add it, when you’d like to start. If you email us, whatever you choose to include.

If we work together. Contact details for you and your team, billing details such as your company name, address, and tax number, and the messages, files, and feedback we exchange during the project. We don’t receive or store full card numbers; payments are handled by the payment provider.

Technical data. Our hosting provider receives what is needed to deliver pages and protect the site, such as your IP address, browser type, and the pages requested.

Visit counts, only if you allow Analytics. The page you open, the site that sent you there (such as a search engine), your country, and your type of device, browser, and operating system. While the page stays open, it sends a short signal every 30 seconds, for up to 30 minutes, so we can see how many people are on the site right now.

Your choices on this device. The site remembers your cookie choices in your own browser. This stays on your device and is not sent to us.

We don’t ask for sensitive information, such as health details or government ID numbers. Please don’t send it through the form.

03How we use it

We use your information to:

reply to you and prepare a proposal if you ask for one;
plan, deliver, and support a project we take on together;
send invoices and keep the records that tax and accounting law requires;
keep this website and the contact form secure and free of spam;
if you allow Analytics, understand which pages people visit, so we can improve the site.

We don’t sell your information or share it for advertising. We don’t add you to a mailing list, and we don’t make decisions about you by automated means alone.

04Our legal reasons

Some laws, such as the GDPR in the European Union and the UK GDPR, require us to name a legal basis for each use:

Contract: preparing a proposal at your request and delivering a project.
Legitimate interests: answering inquiries, running our studio, and keeping the site secure. These interests never override your rights.
Legal obligation: keeping financial records.
Consent: visit counts and any other optional features. You can withdraw consent at any time.

05The contact form

Your message travels over an encrypted connection to our server. It is saved in our private studio inbox, which only signed-in members of the studio can open, and sent to our email as plain text through our email delivery provider. If we reply from the studio inbox, the reply and your message are kept together there. The key used to send email is kept on the server, never in the page. Nothing you type is saved in your browser or visible to anyone else.

To block spam without tracking you or using a puzzle, the form uses a hidden field that people never see, notices messages sent unnaturally fast, and limits how many messages can come from one connection in a minute. Your IP address is used briefly for that limit and is not stored by us.

If the form can’t send, it offers to open your message as a draft in your own email app instead.

06Cookies and similar technology

We only use what the site needs to work, plus a note of your cookie choices, kept in your browser’s local storage. There are no advertising or social media trackers.

If you allow Analytics, we count visits with our own simple tool, run on our hosting. It sets no cookies and stores nothing on your device. Each visit is counted under a code made from your IP address, your browser, and a random value that changes every day. The random value is deleted the next day, so the code can’t follow you from one day to the next or be traced back to you, and your IP address itself is never stored. Visit counting stays off until you allow it, and you can change your mind at any time.

07Who helps us

We use a small number of service providers, only for what each one does for us:

Hostinger hosts this website and runs the contact form, the studio inbox, and visit counting. It also stores the inquiries we receive.
Hostinger also hosts our email, which delivers contact form messages to our inbox and our replies to you.
Our email and file storage providers hold our correspondence and project files.
Payment and accounting providers handle invoices and payments for clients.

They process information on our behalf, under contracts that require them to keep it secure and use it only for us. We may also disclose information when the law requires it, to protect our rights, or to a successor if our business is ever transferred, under this same policy.

08International transfers

We work with clients worldwide, and our providers may handle information in countries other than yours, including the United States. When the law requires it, we rely on recognised safeguards, such as adequacy decisions or standard contractual clauses, so your information keeps the same protection. Write to privacy@baigo.xyz for details.

09How long we keep it

Inquiries that don’t become a project: kept while the conversation is ongoing, then deleted once it has clearly ended.
Client records: kept for the project and any support that follows. Invoices and financial records are kept for as long as tax and accounting law requires.
Visit counts: deleted after about 13 months. The count of who is on the site right now is cleared within minutes.
Technical logs: kept briefly by our hosting provider under its own policy.
Your cookie choices: kept in your browser until you clear them.

10Your rights

Wherever you live, you can ask us to:

tell you what information we hold about you and send you a copy;
correct anything that is wrong or out of date;
delete your information;
limit, or object to, how we use it;
give it to you in a portable format;
withdraw any consent you gave.

Depending on where you live, these rights come from laws such as the GDPR and UK GDPR, the California Consumer Privacy Act, Brazil’s LGPD, Canada’s PIPEDA, and Australia’s Privacy Act. We extend the same rights to everyone. We don’t sell or “share” personal information as California law defines it, and we will never treat you differently for using your rights.

To make a request, email privacy@baigo.xyz. Someone you authorise can also ask for you. We may need to confirm your identity first, we won’t charge you, and we will reply within the time your law sets, usually within one month. Some information may need to be kept for legal reasons; if so, we will tell you why.

11Data in client projects

When we build a website, app, or system that handles information about your customers or users, you are in control of that information and we process it only on your instructions, to do the work. We keep it secure, use it for nothing else, and return or delete it when the project ends. Your own privacy policy covers it. For a data processing agreement, write to privacy@baigo.xyz.

12How we protect it

The site is served only over HTTPS. We collect as little as possible, keep sending keys and credentials on the server, and limit access to the people at Baigo who need it. No system is perfectly secure; if you believe you have found a security issue, please tell us at privacy@baigo.xyz.

13Children

This website and our services are meant for businesses and adults. We don’t knowingly collect information from anyone under 16. If you think a child has sent us information, write to privacy@baigo.xyz and we will delete it.

14Complaints

If you are unhappy with how we have handled your information, please tell us first at privacy@baigo.xyz, so we can put it right. You can also complain to the data protection authority where you live or work.

15Changes to this policy

When this policy changes, we will update it here and change the date at the top. If a change materially affects clients, we will also tell them by email.