Privacy Policy

Last updated: 31 August 2026

Who we are

This website is operated by MAD CGI STUDIO LTD, registered in England and Wales under company number 17395672, registered office 20-22 Wenlock Road, London, England, N1 7GU. We trade as MAD CGI.

We are the data controller for the information described here. We decide why and how it is used, and we are responsible for looking after it.

Questions about this policy: hello@madcgi.com.

This policy does not cover other websites we link to. If you follow a link to a social profile or a client site, that site’s own policy applies.

What we collect

When you contact us. The contact form asks for your name, phone number and email address. You can also tell us your company, the services you are interested in, your budget, your timing and anything you want to share about your project. If you email, call or message us, we keep that correspondence.

When you browse the site. We collect your IP address, browser and device type, screen size, operating system, the pages you view, how long you spend on them, what you click, how far you scroll, and the site or search that sent you.

Some of this is combined into overall patterns, such as which pages hold attention and where people leave. We also use a third-party analytics service to understand how visitors interact with the site, including through heatmaps and session recordings. We configure it to suppress anything you type into forms, and to identify visitors by a random identifier rather than by name or IP address.

None of this runs unless you accept analytics cookies. If you decline, it does not load at all.

We do not use this to track you across other websites, and we do not use it to make decisions about you as an individual.

What we do not collect. We do not ask for or knowingly collect health, ethnicity, religious or political information, or biometric data. Please do not include anything of that kind in the project description field. We take no payments through this site, so we never see your card details.

Why we use it, and our lawful basis

Reply to your enquiry, discuss your project, prepare a quote

Lawful basis: Steps taken at your request before entering a contract, and our legitimate interest in responding to enquiries

Deliver a project you have commissioned and keep the records that go with it

Lawful basis: Performance of our contract with you, and our legal obligations for accounting and record keeping

Understand how the site is used so we can improve it

Lawful basis: Your consent, through our cookie banner

Measure our advertising and reach people who have visited us

Lawful basis: Your consent, through our cookie banner

Protect the site and the form from spam, abuse and fraud

Lawful basis: Our legitimate interest in protecting our site, and our obligation to keep information secure

Market our services to existing clients

Lawful basis: Our legitimate interest, and you can opt out at any time

Where we rely on consent you can withdraw it at any time through the Cookie settings link in our footer. It takes effect immediately and does not affect anything done beforehand. Where we rely on legitimate interests we have weighed those against your rights, and you can ask us to explain that or object at any time.

We do not make decisions about you by automated means alone, and we do not carry out profiling that produces legal or similarly significant effects.

Cookies

Some cookies are necessary for the site to work. Everything else, covering analytics and advertising, runs only if you agree. You choose when you first arrive and can change your mind through Cookie settings in the footer. Full detail is in the Cookie Policy section below.

Who we share it with

We do not sell your personal information.

We use a small number of service providers to run the business. Each acts only on our instructions, under a contract that prevents them from using your information for their own purposes.

  • Website hosting and delivery: The site, and enquiries sent through the contact form
  • Security and spam protection: Traffic to the site, so we can block bots and abuse
  • Analytics and site improvement: How people move through the site, if you accept analytics cookies
  • Advertising measurement: Which ads brought people to the site, if you accept marketing cookies
  • Email and business tools: Our correspondence with you and our own records

Where a provider sets a cookie it is named in the Cookie Policy section below. To find out who sits behind any category above, email hello@madcgi.com.

We also share information where the law requires it, for example with regulators, courts or law enforcement. If we ever sell or reorganise the business, information may pass to the new owner.

Sending information outside the UK

Some providers are based outside the UK, mainly in the United States. When information leaves the UK or the EEA we make sure it is protected to an equivalent standard, relying on adequacy decisions where they apply and on the International Data Transfer Agreement, the UK Addendum, or EU Standard Contractual Clauses where they do not. For detail on any particular provider, email hello@madcgi.com.

How long we keep it

We keep enquiries that do not become projects for 24 months after your last contact with us. Client records and project files are kept for the length of the project and 6 years afterwards, so we can meet our legal and accounting obligations. Email correspondence follows whichever of those two applies.

Session recordings and heatmaps are kept for 12 months. Analytics information is kept for 2 months at event level and 14 months at user level.

After that we delete it, or anonymise it so it can no longer identify you.

Your rights

You have the right to be told how your information is used, to get a copy of it, to have mistakes corrected, to have it deleted where we have no good reason to keep it, to restrict how we use it while a concern is resolved, to object to us using it including for marketing, to receive it in a portable format, and to withdraw consent where consent is what we relied on.

Email hello@madcgi.com. We reply within one month, free of charge. We may ask you to confirm your identity first, so we do not disclose your information to the wrong person.

If something concerns you, please tell us first at hello@madcgi.com so we can put it right.

In the UK, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

In the EU or EEA, you can complain to the data protection authority in your own country. You can find yours through the European Data Protection Board at edpb.europa.eu.

In California, you also have the right to know what we hold, to have it deleted or corrected, and not to be treated differently for exercising those rights. We do not sell your personal information for money. Using advertising cookies can count as sharing for cross-context behavioural advertising under California law. You can stop that at any time by rejecting marketing cookies through the Cookie settings link in our footer, which serves as our Do Not Sell or Share My Personal Information mechanism.

Security

The site is served over an encrypted connection and sits behind a security and filtering layer. Access to personal information is limited to the people who need it. No transmission over the internet is completely secure, so we cannot guarantee absolute security, but we have procedures for any suspected breach, including notifying you and the regulator where the law requires it.

Children

Our services are aimed at businesses and this site is not intended for children. We do not knowingly collect information about anyone under 18. If you believe a child has given us their information, email hello@madcgi.com and we will delete it.

Changes

We update this policy when our practices or the law change. The date at the top tells you when it last changed.

Contact

MAD CGI STUDIO LTD

20-22 Wenlock Road, London, England, N1 7GU. Company number 17395672.

hello@madcgi.com · +48 452 346 428

[ICO registration number]

Cookie Policy

Last updated: 31 August 2026

This explains the cookies used on madcgi.com, operated by MAD CGI STUDIO LTD, 20-22 Wenlock Road, London, England, N1 7GU, company number 17395672. It forms part of this Privacy Policy.

A cookie is a small text file a website puts on your device so it can remember things between pages and visits. We also use local storage and session storage, which work in a similar way. Where this policy says cookies, it means all of them.

Your choice

Necessary cookies are always on. Without them the site cannot work, and the law does not require your consent for them. Everything else is off until you turn it on. You can accept all, reject all, or choose by category, and change your mind at any time through Cookie settings in the footer. Rejecting cookies does not limit your access to any part of the site.

Strictly necessary

_cfuvid

  • Set by: Cloudflare
  • Purpose: Distinguishes visitors sharing an IP address, so security limits apply fairly
  • Duration: Session

Consent preference

  • Set by: MAD CGI
  • Purpose: Remembers the cookie choices you make
  • Duration: 6 months

Our contact form is also protected by Cloudflare Turnstile, which checks that the form is submitted by a person rather than a bot. It does not set a cookie unless a check is triggered.

Analytics, only if you accept

_ga

  • Set by: Google Analytics
  • Purpose: Distinguishes visitors
  • Duration: 400 days

_ga_T8CGYVYLYN

  • Set by: Google Analytics
  • Purpose: Maintains session state
  • Duration: 400 days

_hjSessionUser_6378953

  • Set by: Hotjar
  • Purpose: A random user ID unique to this site, so return visits are recognised
  • Duration: 365 days

_hjSession_6378953

  • Set by: Hotjar
  • Purpose: Holds current session data
  • Duration: 30 minutes, extended on activity

_hjCookieTest, _hjLocalStorageTest, _hjSessionStorageTest, _hjTLDTest

  • Set by: Hotjar
  • Purpose: Check whether cookies and storage can be used, and find the correct cookie path
  • Duration: Created and deleted within about 100 milliseconds

Hotjar also uses local and session storage: hjActiveViewportIds and hjViewportId. All Hotjar cookies are first-party.

Marketing, only if you accept

_gcl_au

  • Set by: Google Ads
  • Purpose: Measures ad clicks that lead to enquiries
  • Duration: 90 days

test_cookie

  • Set by: Google, on doubleclick.net
  • Purpose: Checks whether your browser accepts cookies
  • Duration: 15 minutes

_fbp

  • Set by: Meta
  • Purpose: Identifies browsers for advertising and measurement
  • Duration: 90 days

fr

  • Set by: Meta, on facebook.com
  • Purpose: Delivers and measures advertising on Facebook and Instagram
  • Duration: 90 days

_pin_unauth

  • Set by: Pinterest
  • Purpose: Groups actions for visitors who are not signed in to Pinterest
  • Duration: 365 days

_pinterest_ct_ua

  • Set by: Pinterest, on ct.pinterest.com
  • Purpose: Conversion tracking and measurement
  • Duration: 365 days

The cookies listed as being set on doubleclick.net, facebook.com and ct.pinterest.com are third-party cookies, set by those companies rather than by us.

Your browser can also block or delete cookies directly, under Settings then Privacy. Blocking all cookies stops parts of most websites working, including ours.

Questions: hello@madcgi.com