Effective date: August 21, 2026 · Last updated: August 21, 2026
Plot Twist Studios ("Plot Twist," "we," "us," or "our") is a creative studio offering brand identity, web design and development, content and narrative strategy, illustration, and marketing services. This Privacy Policy explains what personal information we collect through plottwist.studio (the "Site"), how we use and share it, and the choices and rights you have.
This policy is an explanation of our practices, not a contract, and it is not itself your consent to anything. Where we need your consent — for our newsletter and for non-essential cookies — we ask for it separately.
Plot Twist Studios is a creative studio operating as a trade name of an Arizona limited liability company, based in Arizona, United States.
Email is the fastest way to reach us and the method we monitor. If you need to send us something by post, or if a law requires us to give you a postal address, email us and we'll provide one.
Where the EU or UK General Data Protection Regulation applies to a particular engagement or interaction, we act as the "controller" of the personal data described in this policy. Our processing of EEA and UK personal data is occasional and low-risk, so we rely on the exemption in Article 27(2) rather than appointing an EU or UK representative. If that changes, we will name a representative here.
| What | When | Examples |
|---|---|---|
| Contact and inquiry details | You submit our inquiry or contact form, book a call, or email us | Name, email address, company or brand name, website, budget range, services of interest, project description, anything else you type into the message field |
| Newsletter details | You subscribe to our mailing list | Email address, name (if provided), your subscription preferences |
| Client and engagement information | You engage us for services | Billing and contact details, business information, brand assets and materials you share with us, credentials or access you grant us to your systems (for example, a Webflow, hosting, domain, ad, or analytics account), project correspondence |
| Payment information | You pay an invoice or deposit | Handled by our payment processor. We receive confirmation, amount, and limited transaction details, but we do not collect or store full payment card numbers |
| Order and shipping details | You buy merchandise from us, if and when we sell it | Name, shipping and billing address, email, phone, order contents and history |
| Content you submit publicly | You comment on our blog or tag/interact with us on social platforms | Whatever you choose to post |
| Job or collaboration inquiries | You apply or pitch to work with us | Name, contact details, portfolio, résumé, and anything included in your submission |
Please don't send us sensitive personal information (government ID numbers, health information, financial account numbers, precise geolocation) unless we specifically ask for it as part of an engagement.
When you visit the Site, we and our service providers may automatically collect:
We may receive information about you from:
We use personal information to:
We do not sell your personal information for money. See Section 7.4 for how certain advertising and analytics cookies may be treated as a "sale" or "sharing" under some state privacy laws.
We do not use your personal information or confidential client materials to train publicly available generative AI models, and we require our vendors handling client materials to do the same wherever their terms allow us to.
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
We use the following categories:
We share personal information only as described below. We do not rent or sell your personal information to data brokers.
We share information with vendors who perform services for us and are contractually required to protect it and use it only on our instructions. Categories include:
A current list of our primary service providers is available on request at hello@plottwist.studio.
We work with freelance designers, developers, illustrators, writers, and other collaborators. Where a project requires it, we share the information needed to do the work, under confidentiality obligations.
We may publish work we created, along with the client's name, logo, and a description of the engagement, in our portfolio, case studies, social posts, and pitch materials — unless a signed agreement with that client says otherwise, or the client asks us in writing not to. We do not publish a client's confidential business information, customer data, or unpublished plans without permission.
We may disclose information if we believe in good faith it is necessary to comply with a law, regulation, subpoena, or government request; to enforce our agreements; or to protect the rights, property, or safety of Plot Twist, our clients, or others.
If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
We share information when you ask us to — for example, when you ask us to coordinate with your printer, developer, ad platform rep, or another vendor.
We keep personal information only as long as we need it:
We may keep information longer where a law requires it or where it's needed for an active or reasonably anticipated legal claim.
We extend the core rights below to everyone who contacts us, regardless of where you live. Some rights apply to you as a matter of law depending on your location.
Email hello@plottwist.studio with the subject line "Privacy Request" and tell us what you'd like us to do. We may need to verify your identity — usually by confirming you control the email address associated with the information, or by asking for details only you would know. We will respond within 45 days — or within one month where the EU or UK GDPR applies — and will tell you if we need an extension that the applicable law permits.
An authorized agent may submit a request on your behalf with written proof of authorization, and we may still contact you directly to confirm.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, your state's comprehensive privacy law may give you some or all of the rights above. Arizona does not currently have a comprehensive consumer privacy law, but Arizona's data breach notification law (A.R.S. § 18-552) applies to us.
California residents. Under the CCPA/CPRA, in the preceding 12 months we have collected the categories of personal information listed in Section 2 — identifiers, customer records, commercial information, internet and network activity, approximate geolocation, professional or employment-related information, and inferences drawn from that information — from the sources and for the business purposes described in Sections 2 and 3, and disclosed them for business purposes to the categories of recipients in Section 5. We do not sell personal information for monetary or other valuable consideration, and we do not currently share personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16 years of age. We do not use or disclose sensitive personal information for purposes that would require offering a "limit the use of my sensitive personal information" right. California residents may also request information under California's "Shine the Light" law (Civil Code § 1798.83) by emailing us.
Some state privacy laws define "sale" and "sharing" broadly enough to cover third-party analytics and advertising cookies, even where no money changes hands.
Analytics. We run our analytics with advertising and personalization features (such as Google Signals) turned off, under a data processing agreement that limits our provider to using the data on our behalf. On that configuration, we do not treat our analytics as a "sale" or as "sharing" for cross-context behavioral advertising.
Advertising. We do not currently use advertising cookies or pixels. If we begin using them, that activity will likely qualify as "sharing" for cross-context behavioral advertising in some states, and we will update this policy and turn on the opt-out controls before doing so. You can opt out at any time by adjusting your choices in our cookie banner, by transmitting a Global Privacy Control signal, or by emailing us at hello@plottwist.studio.
In addition to the rights above, you may object to or request restriction of certain processing, and you have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to address your concern first.
We are based in the United States, and our service providers are primarily located in the United States. If you access the Site or contact us from outside the US, your personal information will be transferred to and processed in the US, where data protection laws may differ from those in your country. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism, and we take steps to ensure your data receives an equivalent level of protection.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encrypted connections (HTTPS), access controls, multi-factor authentication on studio accounts, limited access on a need-to-know basis, and confidentiality agreements with collaborators. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any required regulators as the law requires.
Please use care when sending us credentials or sensitive materials. Where possible, share access through a platform's built-in invitation system or a password manager rather than by email.
The Site is intended for a general business audience and is not directed to children or teenagers. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, email hello@plottwist.studio and we will delete it.
The Site links to third-party platforms including Instagram, X, Behance, LinkedIn, Vimeo, and client websites. We are not responsible for the privacy practices or content of those services. Their own privacy policies govern what they collect when you visit or interact with them, including when you view embedded content on our Site.
If you subscribe to our newsletter, you'll receive studio updates, work, and occasional promotional content. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing hello@plottwist.studio. We will still send you transactional and project-related messages — proposals, invoices, schedules, and support — as part of an active engagement or inquiry.
We may update this Privacy Policy from time to time. We'll change the "Last updated" date at the top, and if the changes are material we'll provide more prominent notice, such as a banner on the Site or an email to subscribers. Where a change requires your consent, we'll ask for it before it takes effect.
Questions, requests, or concerns about this policy or your personal information:
Plot Twist Studios
Arizona, United States
hello@plottwist.studio
This policy describes our practices for the Site and our studio services. It does not modify the terms of any signed client agreement, statement of work, or non-disclosure agreement — those control where they conflict with this policy for that client's information.