Monova StudiosWebsite and services

Privacy Policy

How Monova Studios handles the personal data of visitors, enquirers and clients across this website, its proposals, invoices and the pages it hosts.

Last updated
7 November 2026
Controller
Monova Studios
Jurisdiction
England and Wales

01Who we are

Monova Studios ("we", "us") is a web and software studio run by Morgan Lee in the United Kingdom. We are the data controller for the personal data described here. You can reach us at hello@morgan-lee.dev.
This policy covers this website and the pages it serves: the contact form, proposals (/quote), payment pages (/pay), review requests (/review), shared files and snippets (/i, /f, /s) and the status page. Software we build for clients, such as Discord bots, has its own policies.

02The data we process

Contact form

What
Your name, email address, optional Discord username, the kind of project, your budget range and your message, plus the IP address the form was sent from.
Why
To reply to you and, if we work together, to prepare a proposal.
Kept for
Until the enquiry is closed, and for up to 24 months afterwards so we can refer back to it.

Proposals

What
The name and email you enter when accepting or declining a proposal, the time you did so and your IP address.
Why
To record that the proposal was agreed and by whom. This forms part of our contract with you.
Kept for
For six years after the project ends, as required for business and tax records.

Payments

What
Invoice details (amount, description, your name and email) and Stripe's reference for the payment. Card numbers are entered on Stripe's pages and never reach our servers.
Why
To take payment and keep accounting records.
Kept for
Six years, as required by HMRC.

Testimonials

What
What you write when we invite you to leave a review: your words, name, role, company and an optional logo.
Why
To publish on this website, only with the consent you give on the form.
Kept for
While published. Ask us and we will take it down.

Visiting the site

What
Our hosting and ${legal.cdn} keep standard server logs (IP address, pages requested, browser type) for security. Shared file and snippet pages count views in total, not per person.
Why
Keeping the site running and spotting abuse.
Kept for
Server logs for up to 30 days. View counts are totals only.

Cookies

What
The public site sets no tracking cookies. A session cookie is used only when a member of the studio signs in to the admin area.
Why
Signing in to manage the site.
Kept for
The admin session cookie expires when it is cleared or after seven days.

04Who we share it with

  • Stripe Payments UK Ltd. Processes card payments. Stripe's own privacy policy applies to what you enter on its pages.
  • Supabase (database and file storage). Stores the records described above.
  • Hosting. The site runs on a virtual server with OVH Ltd in the United Kingdom, behind Cloudflare for security and caching.
  • Discord. New enquiries, accepted proposals, payments and testimonials trigger a notification to a private Discord channel that only the studio can see.
  • Nobody else. We do not sell or rent personal data and we use no advertising or analytics services.
Some of these providers may process data outside the United Kingdom. Where they do, they rely on the UK's adequacy regulations or standard contractual clauses.

05How long we keep it

The periods above are the longest we keep each kind of data. Enquiries that do not lead to a project are deleted sooner on request. Backups roll over and are overwritten within 30 days.

06Your rights

You can ask to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing of it, and to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.
Email hello@morgan-lee.dev from the address the request is about and we will answer within one month. We may need to keep invoice and contract records where the law requires it, and we will tell you if that applies.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

07Changes

We will post any changes on this page and update the date at the top. Material changes to how we use client data will be emailed to current clients first.