Who runs this site
DAYTHREE STUDIO (UEN 53531078A), a sole proprietorship registered in Singapore, running as DayThree Studio. For anything about your data, contact hello@daythree-studio.com or WhatsApp +65 8957 2867.
What gets collected when you just visit
There are no accounts. Nothing is collected unless you fill in the enquiry form yourself, and two things happen in the background on any page:
- Hosting logs. The site is hosted on Vercel, which briefly processes your IP address and browser details to serve the pages and keep the service secure, as any web host does.
- Fonts. The typefaces load from Google Fonts, which means your browser requests files from Google's servers and Google sees your IP address as part of that request.
Analytics and advertising measurement
The site may use standard measurement tools such as Google Analytics and the Meta Pixel to understand how visitors find and use it, including whether they arrived from an ad. These tools use cookies or similar identifiers and process your IP address and pages visited. Nothing here identifies you by name.
The site also uses Microsoft Clarity, which records how visitors scroll, click and move through a page, so I can see which parts work and which get skipped. It hides what you type into forms, so your answers are not recorded. Microsoft handles that data under its own privacy statement.
You can opt out of this kind of measurement with your browser's tracking protections, an ad blocker, or Google's own opt-out tool.
When you send the enquiry form
The form asks for your name, your email, optionally your WhatsApp number, and what you are building. Sending it stores those answers, along with the page you sent it from and how you reached the site, in my own customer records so I can reply and keep track of the conversation. Those records run on Supabase and are hosted on Vercel. I use them to reply, give you honest pointers and prepare a quote if you ask for one. They are never sold, rented or added to a mailing list.
The site also works out how you arrived, from the web address you landed on and the site that referred you, so I know whether an enquiry came from an ad, a search or a recommendation. That is stored in your browser and sent with the form. It says nothing about who you are.
The same applies to the register-interest form on my classes site, courses.daythree-studio.com. It asks for your name, your WhatsApp number, which class you are interested in, and optionally what you would build. Those answers go into the same customer records, I reply on WhatsApp, and nothing else happens with your number.
When you message me on WhatsApp
The other way to contact me is WhatsApp. When you tap a WhatsApp button, WhatsApp (owned by Meta) handles the conversation under its own privacy policy, and I see whatever you choose to send: usually your name, number and what you are building. I use that to reply, give you honest pointers, and prepare a quote if you ask for one. It is never sold, rented or added to a mailing list.
When you pay me
Card payments, such as a DayThree CRM subscription, go through Stripe. Stripe's payment page asks for your name, business name, phone number, email and card details, and Stripe processes them under its own privacy policy. I never see or store your full card number. I receive your name, business name, contact details and what you paid, and use them to set up what you paid for, send your receipts and invoices, and keep the business records the law requires.
Payments by bank transfer or PayNow go straight to my business bank account, which shows me the payer's name, the amount and the reference you entered.
DayThree CRM and your Google Calendar
Separately from this website I run a booking and enquiry tool for clients, called DayThree CRM. If you are a client and you connect your Google Calendar to it, this is exactly what that does and nothing else.
- What it reads. Only whether you are busy. The CRM asks Google for your busy and free times so a slot you are already committed to is never offered to someone booking you. Google returns start and end times and nothing more: no titles, no guests, no locations, no descriptions. Those times decide which slots to show and are not stored anywhere.
- What it writes. When someone books you, the CRM puts the appointment in your calendar as an event, with the time, who booked, and a link they can use to change or cancel. It updates that event if the appointment moves and cancels it if the appointment is cancelled. It never touches an event it did not create.
- What it keeps. The permission you granted, encrypted, so it can keep doing the two things above without asking you again. And the identifier of each event it created, so it updates the right one. That is the whole list.
None of it is sold, shared with anyone else, used for advertising, or used to train an AI model. No person at DayThree Studio reads your calendar, and the permission we hold could not show us one: free and busy times carry no detail to read.
You can end it whenever you like. Disconnect under Settings, then Integrations, inside the CRM, or remove access from your Google account permissions page. Either one revokes it immediately. Events already written stay in your calendar and are yours to keep or delete.
DayThree CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who else touches the data
- Vercel (hosting, and the customer records behind the form)
- Supabase (the database those records sit in)
- Google (fonts, and analytics or ads measurement where used)
- Meta / WhatsApp (messaging, and ads measurement where used)
- Google Calendar (only for clients who connect it to DayThree CRM, as described above)
Each processes data under its own published policy. I do not sell personal data to anyone, and there is no third party beyond these.
How long things are kept
Enquiries stay in my customer records until you ask me to remove them, or until it is clear nothing is going to come of it. WhatsApp conversations stay in my WhatsApp like any chat, and quote records are kept for accounting. Analytics data, where used, is retained on the default settings of the tool. If you want a conversation or your details deleted, ask and it is done.
Your rights
Under the PDPA you can ask what personal data I hold about you, ask for it to be corrected, or withdraw consent for me to keep it. Message or email the contacts above and I will sort it out directly. If you are unhappy with how I handled it, you can complain to Singapore's Personal Data Protection Commission.
Changes
If what the site collects changes, this page changes first, with the date above updated. No silent edits.