GDPR-ready · NDA first · WCAG 2.2 AA Held to a European standard. 
Every time. 

Privacy by design, and a Data Processing Agreement with EU Standard Contractual Clauses whenever you need one.

• We collect and process only the personal data a project needs, and document where it lives.
• A Data Processing Agreement, including the EU Standard Contractual Clauses, is signed on request before work with personal data begins.
• Sub-processors are listed openly, and personal data is returned or deleted when the engagement ends.
• Hosting regions are chosen to suit your obligations — including EU regions when your data must stay there.

We sign a non-disclosure agreement before we see a single page of your material.

• Send us an NDA, or use ours — it is signed before any confidential material changes hands.
• Access to your systems is limited to the people working on your project, and removed when they finish.
• Credentials live in your own password manager and cloud accounts, never in email or chat.

Built to WCAG 2.2 AA — ready for the European Accessibility Act, and better for every visitor.

• Contrast, focus, keyboard navigation and labels are checked on every page, not just the home page.
• Motion respects each visitor’s reduced-motion setting.
• Content is written to be understood — clear headings, plain language and meaningful link text.

No tracking cookies unless you ask for them, and consent done properly when you do.

• Our sites measure traffic with cookie-free analytics, so most need no cookie banner at all.
• When a campaign does need tracking, consent comes first — with “reject” as easy as “accept”.
• No third-party scripts are added without a reason you can see in writing.