Last updated — 6 August 2026

Privacy Policy

This policy explains what personal data anagram collects when you use www.anagram.club, why we collect it, who we share it with, and the control you have over it.

1. Who we are

Anagram (“anagram”, “we”, “us”) is a brand design studio operating from Paris and New York. We are the data controller for the personal data processed through www.anagram.club.

For any question about this policy or about how we handle your data, write to hello@anagram.club.

2. What we collect

Data you give us. When you contact us by email, respond to a job posting or discuss a project, we receive your name, email address, company, and whatever else you choose to include in your message or attachments.

Data collected automatically. When you browse the site, and only where you have consented to it, we collect technical and usage data: pages viewed, referring page, approximate location derived from your IP address, device type, browser, operating system, screen size and session duration.

What we never collect. We do not ask for special categories of data (health, political opinions, religious beliefs, biometrics), and we do not process payment data on this website.

3. Why we process it, and on what legal basis

Responding to enquiries — answering your message and, where relevant, preparing a proposal. Legal basis: steps taken at your request prior to entering a contract, or our legitimate interest in replying to you.

Recruitment — reviewing applications for open roles. Legal basis: steps taken at your request prior to entering a contract.

Audience measurement — understanding how the site is used so we can improve it. Legal basis: your consent.

Marketing measurement — measuring the performance of our campaigns. Legal basis: your consent.

Security and reliability — keeping the site available and protecting it from abuse. Legal basis: our legitimate interest.

4. Cookies and similar technologies

Cookies and similar storage are only set after you have made a choice in our consent banner, except for those that are strictly necessary. Until you consent, analytics and marketing tags are blocked and Google’s Consent Mode signals are set to denied.

You can change or withdraw your choice at any time through , or by clearing the site data in your browser.

5. Who we share data with

We do not sell personal data. We share it only with service providers who process it on our behalf, under contract and on our instructions: our hosting provider (Vercel), our email provider, our tag manager (Google Tag Manager) and the analytics and marketing tools listed above.

We may also disclose data where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

6. International transfers

Some of our providers are established in the United States. Where personal data leaves the European Economic Area, the transfer is framed by the European Commission’s Standard Contractual Clauses, or by an adequacy decision such as the EU–US Data Privacy Framework, together with the additional safeguards those mechanisms require.

7. How long we keep it

Enquiries and project correspondence: 3 years from the last contact. Applications for open roles: 2 years from the last contact, unless you ask us to delete them sooner. Consent records: 6 months. Analytics and marketing data: as set out in the table above.

Data relating to a signed engagement is kept for the duration of the contract and for the statutory periods that follow it.

8. Security

The site is served over HTTPS. Access to the data we hold is limited to the people in the studio who need it, and our providers are selected for the guarantees they offer. No system is perfectly secure, but we take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

9. Children

This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with data, contact us and we will delete it.

10. Changes to this policy

We may update this policy to reflect changes to the site, to the tools we use, or to the law. The date at the top of this page always reflects the version in force. Material changes will be signalled on the site before they take effect.

11. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your personal data:

  • Access Obtain a copy of the personal data we hold about you.
  • Rectification Ask us to correct data that is inaccurate or incomplete.
  • Erasure Ask us to delete your data when we no longer have grounds to keep it.
  • Restriction Ask us to limit how we process your data while a request is reviewed.
  • Portability Receive the data you provided in a structured, machine-readable format.
  • Objection Object to processing based on our legitimate interest, including profiling.
  • Withdraw consent Withdraw your consent at any time, without affecting processing already carried out.

To exercise any of them, email hello@anagram.club. We reply within one month. If you are not satisfied with our response, you can lodge a complaint with the CNIL (cnil.fr) or with the supervisory authority of the country where you live.