Festa Design Studio ("Festa," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect personal information when you interact with our websites, applications, and services.
This policy applies to:
- Our main website at festa.design and all subdomains (including toolkit.festa.design)
- Our web applications, including Logframe App and Zika Alert
- Forms, feedback tools, newsletters, and sign-up flows we host
- Email and direct communications relating to these properties
By using our sites, applications, and services, you agree to the practices described in this Privacy Policy.
This Privacy Policy is for informational purposes and does not constitute legal advice. Your organization should consult qualified legal counsel to confirm that your own policies and practices comply with applicable laws.
1. Who We Are and How to Contact Us
Festa Design Studio is a design practice that supports nonprofits, impact startups, and social enterprises with human-centered, trauma-informed design and learning experiences.
If you have questions about this Privacy Policy or how we handle your data:
- Website: https://festa.design
- Email: hello@festa.design
- Phone: +1 (240) 788-0787
2. Information We Collect
We keep our data collection minimal and purposeful. Here is what we collect and why.
2.1 Newsletter Sign-Up
When you subscribe to our newsletter, we collect:
- Your email address — and nothing else
You can unsubscribe at any time using the unsubscribe link in the footer of any newsletter email, or by contacting us directly. Once you unsubscribe, we remove your email from our active mailing list.
Our newsletter is delivered through Mailgun, which processes your email address on our behalf.
2.2 Feedback Form
When you submit a feedback or inquiry form, we collect:
- Your name (as the person submitting the form)
- Contact person from your organization (if different from you)
- Your questions or feedback — the content you choose to share with us
We use this information solely to respond to your inquiry and to improve our services. We do not use feedback form data for marketing purposes.
2.3 Application Accounts
When you create an account on one of our Applications (such as Logframe App or Zika Alert), we collect the information needed to create and maintain your account, which may include your name, email address, and organization name. Your project data within these Applications belongs to you and is stored securely on our behalf by our cloud infrastructure provider.
2.4 Cookies and Analytics
We use cookies through Google Analytics to understand how visitors interact with our websites. This helps us improve the design and usability of your web experience with Festa.
What our cookies do:
- Track page visits, navigation paths, and time spent on pages
- Help us understand which content and features are most useful
- Identify general usage patterns and improve user experience
What our cookies do not do:
- We do not use cookies to track you across other websites
- We do not install any software on your device
- We do not sell or share analytics data with advertisers
A note about IP addresses: Google Analytics may process IP addresses as part of its standard operation. We use available anonymization features to minimize personal data collection through analytics. We do not independently collect, store, or use IP addresses for any purpose.
Managing cookies: You can control or disable cookies through your browser settings at any time. Blocking cookies may affect how some features of our sites function. Where required by law, we present a cookie consent mechanism before setting non-essential cookies.
3. How We Use Your Information
We use your information for the following limited purposes:
To communicate with you — responding to inquiries, sending newsletters you opted into, and managing feedback you submit.
To operate and improve our services — maintaining our websites and applications, monitoring performance, troubleshooting issues, and understanding how our content and tools are used so we can improve them.
To manage your account — if you create an account on one of our Applications, we use your information to provide the service, maintain your access, and support your use of the application.
To meet legal obligations — complying with applicable laws, detecting fraud or abuse, and protecting the rights and safety of Festa and others.
4. Data Storage and Security
- Newsletter emails are processed and stored by Mailgun and Amazon Web Services (AWS).
- Application data is hosted on secure cloud infrastructure through AWS and Laravel Cloud.
- Analytics data is processed by Google Analytics and is not stored independently by Festa.
We use reasonable technical and organizational measures to protect personal information from unauthorized access, loss, misuse, or alteration. No method of data transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention
- Newsletter subscribers: Your email is retained until you unsubscribe or we discontinue the list.
- Feedback form submissions: Retained for a reasonable period to manage inquiries and potential collaborations, then deleted unless a longer retention period is required by law.
- Application accounts: Your account data and project data are retained for the duration of your account. If you request deletion, we will remove your data within a reasonable timeframe, subject to legal obligations.
- Analytics data: Processed by Google Analytics according to their retention policies. We do not independently retain analytics data tied to individual visitors.
When personal information is no longer needed, we delete it or anonymize it so it can no longer be linked to an identifiable person.
6. When We Share Your Information
We do not sell your personal information. We do not share your information with advertisers.
We may share personal information only with:
Service providers — trusted third parties that help us operate our services, including Mailgun (email delivery), AWS (hosting), Google (analytics), and Laravel Cloud (application hosting). These providers process your information on our behalf and under our instructions.
Legal requirements — if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Festa, our users, or others.
Business transitions — if Festa undergoes a reorganization or similar change, personal information may be transferred as part of that process. We will take steps to ensure continued protection of your data.
7. International Data Transfers
Our service providers and servers may be located in different countries. Your personal information may be stored and processed outside of your country of residence. Where required by law, we take appropriate steps to ensure international transfers are protected by suitable safeguards.
8. Your Rights
Depending on your location and applicable law, you may have some or all of the following rights:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct inaccurate or incomplete information
- Deletion — ask us to delete your personal information
- Restriction — request that we limit how we use your information
- Objection — object to specific types of processing, including direct marketing
- Data portability — request a copy of your data in a structured, commonly used format
- Withdraw consent — where we rely on your consent (for newsletters or cookies), you can withdraw it at any time
To exercise any of these rights, contact us at hello@festa.design. We may need to verify your identity before fulfilling your request.
If you are based in the EEA, UK, or a jurisdiction with a supervisory authority, you may also lodge a complaint with your local data protection authority.
9. Legal Bases for Processing (EEA/UK Visitors)
If you are located in the European Economic Area or the United Kingdom, our legal bases for processing your personal information include:
- Consent — when you opt in to receive newsletters or accept non-essential cookies
- Contract — when processing is necessary to provide a service you requested (such as maintaining your Application account)
- Legitimate interests — when we process data to maintain and improve our sites, so long as these interests are not overridden by your rights
- Legal obligations — when processing is necessary to meet legal or regulatory requirements
10. Children's Privacy
Our websites, applications, and educational content are designed for adult professionals and organizations. They are not directed at children under 18.
We do not knowingly collect personal information directly from children under 18 through our public sites or applications.
Clarification for youth-led organizations: Our toolkit and educational content may be accessed by representatives of youth-led organizations or by young professionals who meet the age requirements in Section 3 of our Terms of Service. When we refer to organizational contacts or account holders, we mean individuals who are at least 18 years of age and are acting in a professional capacity on behalf of their organization.
If you believe that a child under 18 has provided us with personal information without appropriate consent, please contact us so we can review and, if necessary, delete that information.
11. Third-Party Links and Content
Our content may include links to websites, resources, or tools operated by other organizations. We do not control these third-party sites and are not responsible for their privacy practices. When you follow a link to another site, that site's own privacy policy governs how your information is collected and used.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we may provide additional notice on our website or through email.
Continued use of our websites and services after the updated policy is posted means you accept the revised Privacy Policy.
13. Contact
If you have questions, concerns, or requests related to this Privacy Policy:
Festa Design Studio
Website: https://festa.design
Email: hello@festa.design
Phone: +1 (240) 788-0787