Legal
Privacy notice
Last updated 3 November 2026
How DRAWMA uses your information while it is an early-stage concept, in plain words. If anything is unclear, ask us.
Who we are
DRAWMA is a brand and product operated by CHISUS DESIGN LIMITED, a company registered in England and Wales (company number 16511663). DRAWMA is not a separate company.
In this notice, “DRAWMA”, “we” and “us” mean CHISUS DESIGN LIMITED running DRAWMA. We decide how and why the information described here is used, which makes us its “controller”.
Questions about your information, or to use any of your rights: privacy@drawma.live. Anything else: hello@drawma.live.
What we’re doing at this stage
DRAWMA is in development and has not launched. The idea is a way to have your portrait drawn live by an artist over video, but there are no bookings, payments or portrait sessions yet, and it may never open. Right now we use this website to:
- understand how much interest there is;
- build an early-access list (the waitlist);
- find artists who might draw with us;
- invite people who registered their interest to take part in research, if they want to;
- test and improve the idea, and prepare for a possible launch.
What information we collect
If you join the waitlist
- your email address;
- if you joined on or before 24 October 2026, that you confirmed you were 18 or over, and when (the list no longer asks);
- if you live in the UK and choose to tell us, the first half of your postcode (for example “SE15”), to help us choose where to run live drawing nights. We never keep the second half;
- the country your internet connection appears to come from, worked out by our hosting provider from your IP address (see “When you visit”);
- which welcome email we sent you;
- your name, only if you give it to us later (the form doesn’t ask for it);
- where you came from: the campaign tags in the link you arrived by (utm_source, utm_medium, utm_campaign, utm_content) and the address of the page that sent you, without anything after a “?”;
- the language you read the site in;
- when you joined;
- your choices: whether you ticked the box for news (and when, and which wording you saw), and whether you told us you’d like to take part in research, or asked us not to invite you.
If you apply as an artist
- your name and email address;
- that you confirmed you are 18 or over, and the country your connection appears to come from, as above;
- a link to your portfolio, and a link to a social profile if you give one;
- what you tell us about your artistic practice;
- whether you ticked the box for news (and when, and which wording you saw);
- where you came from and the language you read the site in, as above; and when you applied.
Your email address
Joining the waitlist puts your address on our launch list: we’ll email you when DRAWMAopens, so you can create an account then. It doesn’t create an account. We don’t check that an address belongs to the person who typed it, so when you join or apply we send one email to say so. If someone else typed your address, use the unsubscribe link in that email and we won’t email you again; or write to us and we’ll delete it.
The work at the links you give stays where it is: we look at it there. Please don’t send us anything we haven’t asked for, such as your home address, date of birth, bank or tax details, or information about your health or beliefs.
Artists we contact ourselves
We may also find artists whose work we admire and contact them about drawing with us. For this we use what they have made public for their work: their name, a portfolio or social profile, and the contact details published there, with a short note of why we got in touch and what they replied. We don’t add them to any news or marketing list, and if an artist would rather we didn’t contact them, we won’t again.
When you visit
We count visits and a few actions on the page (for example, that a waitlist form was shown or sent) as totals per day, with the page and the campaign tags, and count visits by the country your connection appears to come from (told to our server by our hosting provider). These counts contain nothing that identifies you: no name, email address, IP address, cookie or device ID. How this works is under Cookies and similar technologies.
Only if you accept cookies:we also use the Meta Pixel, a tool from Meta (the company behind Facebook and Instagram), to measure our advertising — to see whether people who saw our ads on Facebook or Instagram came to the site and joined the waitlist. If you press “Accept”, your browser tells Meta which page you opened and, when you join the waitlist, that you joined, with whether you appear to be in the UK. Meta also receives what any website sends it: your IP address, your browser’s details, and its own cookies, which it can link to a Facebook or Instagram account. We never send Meta your email address, your name or anything you type. If you press “Reject”, or don’t choose, the Meta Pixel isn’t loaded and nothing goes to Meta.
When you send a form, our hosting provider tells our server which country your connection appears to come from, worked out from your IP address. We keep that country — not your IP address — with your sign-up, to understand where interest in DRAWMAcomes from and decide where to launch first. The forms don’t ask where you live; if you joined when they did, we also keep the country you chose. We don’t use it to block anyone, and anyone, anywhere, can join.
To stop automated spam, we limit how many forms can be sent from one place. For this, your sign-up is stored with a short scrambled (hashed) code made from your IP address, never the address itself. We treat that code as personal information, use it for nothing else, replace it each time a form is sent for your address, and delete it with your sign-up. Our host, Vercel, keeps basic request details — the page, your browser type and your IP address — in logs we can see for 1 day. Vercel deletes or anonymises them when it no longer needs them.
Why we use it, and our lawful basis
UK data protection law says we need a lawful basis for each use of your information. Each purpose below is separate: agreeing to one doesn’t mean agreeing to another.
Waitlist and early access
To keep the list you asked to join, to understand how much interest there is and where it comes from, and to contact you about early access to DRAWMA if it opens. Lawful basis: our legitimate interests in running the list you asked to join and in finding out whether DRAWMA is wanted. You asked to join, and we keep only what we need to run the list and measure interest.
Welcoming you
To send one welcome email when you join or apply, which depends on the country you chose (if you were asked), else the country your connection appears to come from, and the form you used. Lawful basis: our legitimate interests in telling people they have joined, and in letting anyone whose address was typed by someone else remove it at once. The welcome is a message about what you asked for, not marketing.
Product research
We’re testing some early ideas for DRAWMA. If you ticked the box to take part in research, we may invite you to an optional video or phone interview, or a short survey. We only invite people who ticked that box. We’re looking for honest reactions to the idea and the experience we’re designing. Taking part is completely up to you, and saying no, or not replying, changes nothing. An invitation will only be about research: it won’t be used to advertise to you. Lawful basis: your consent, given by ticking the research box. You can withdraw it at any time, as easily as you gave it: use the link at the foot of any email from us, or write to privacy@drawma.live. If you take part, we’ll tell you beforehand what the interview or survey involves and what we’ll keep from it.
Artist recruitment
If you apply: to review your application, look at the work you link to, and reply to you. Lawful basis: taking steps you have asked us to take before we might agree to work together.
Artists we contact ourselves: we may contact artists through public professional channels (such as Instagram or their art school) about drawing with us. We make one relevant approach, don’t send unsolicited marketing email, and never add anyone to our mailing list without consent. Lawful basis: our legitimate interests in finding the right artists.
Marketing
To send you occasional DRAWMA news and launch updates (and, for artists, artist opportunities) by email, only if you ticked the box for it. Lawful basis: your consent, which you can withdraw at any time, as easily as you gave it: use the link at the foot of any email from us, or write to privacy@drawma.live. The box is never ticked for you, and leaving it empty doesn’t affect your place on the waitlist or your application.
Running the website, and measuring it
To keep the website working and secure, stop spam, fix problems, and count visits and actions as totals so we can see whether the idea is working. Lawful basis: our legitimate interests in running a working, secure website and understanding, in aggregate, how it is used. The counts identify no one, and nothing is stored on your device to make them.
Advertising measurement (Meta Pixel)
To measure whether our ads on Facebook and Instagram bring people who join the waitlist, and so spend less on ads that don’t. Lawful basis: your consent, given by pressing “Accept” on the cookie banner. Meta decides for itself how it uses what it receives, under its own privacy policy; for collecting it on our website and sending it to Meta, we and Meta Platforms Ireland Limited are responsible together. You can withdraw your consent at any time, as easily as you gave it: see Cookies and similar technologies.
Legal obligations
Where the law requires us to keep or share information. Lawful basis: legal obligation.
Recording sessions
DRAWMA doesn’t record anything today: there are no sessions yet. We may one day offer to record selected portrait sessions, and to use short clips, images or audio from them to show people what DRAWMA is like.
If we do, we will ask everyone in the session — you and the artist — separately, at the time, and each time: once for permission to record, and once more for permission to use any of it to promote DRAWMA. Saying no will be just as easy, and you’ll be able to change your mind. Joining the waitlist, applying as an artist, ticking the box for news or taking part in a session never gives that permission on its own.
Who we share it with
We don’t sell your information. We share nothing for advertising except, if you accept cookies, what the Meta Pixel sends Meta (above) — never your email address or name. It is seen by the small team running DRAWMA: today, only its founder. We use service providers to run the website:
Provider What it does for us Where Vercel Hosts the website and runs the code that receives your form Server code in London; pages from the part of its network nearest to you; main facilities in the United States Supabase The database that stores the waitlist and applications London, UK; may process elsewhere, including the United States Resend Sends the emails the website sends: the welcome, and a note to our own inbox about each new sign-up or application United States (emails are sent from Ireland) Google Workspace Our email inbox, where replies and messages to hello@ and privacy@ arrive Any country where Google has facilities Each one acts on our instructions only. Meta is not on this list because it is not our service provider: if you accept cookies, it receives information for its own purposes too (above). We may also share information if the law requires it, or if DRAWMA or its business is transferred to someone else, who would have to use it in the same ways.
Where it is stored
Our website is hosted by Vercel, which runs our server code in London; pages are served from the part of its network nearest to you, and its main facilities are in the United States. Our database is hosted by Supabase in London; Supabase and its subprocessors may process data elsewhere, including the United States. Emails are sent by Resend, which stores email data, including message content and logs, in the United States. Our inbox is Google Workspace, which may process data in any country where Google has facilities.
Where your information goes to the United States, it is protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, in each provider’s data processing agreement. Vercel, Resend and Google are also certified to the UK Extension to the EU-U.S. Data Privacy Framework.
If you accept cookies, what the Meta Pixel sends goes to Meta Platforms Ireland Limited, and Meta may transfer it to Meta Platforms, Inc. in the United States, which is certified to the UK Extension to the EU-U.S. Data Privacy Framework.
How long we keep it
- Waitlist: 24 months from when you joined, or 12 months after DRAWMA launches, whichever comes first. Then we delete it.
- Everything else (artist applications, research notes): only as long as we have a genuine need for it. We review what we hold and delete or anonymise it when it is no longer needed, unless we need to keep it for legal reasons or to establish, exercise or defend a legal claim.
DRAWMA is at a very early stage. If it doesn’t go ahead, we will review what we hold and delete or anonymise it.
If you stop news, or stop all emails, we keep a record that you did, and when, so we don’t email you again by mistake.
Your rights
You can ask us to:
- give you a copy of the information we hold about you (access);
- correct it if it’s wrong (rectification);
- delete it (erasure);
- stop using it for a while (restriction);
- stop using it where we rely on legitimate interests (objection);
- give it to you, or to someone else, in a format a computer can read, where this applies (portability).
You can withdraw consent to news at any time, and you can object to direct marketing at any time; we will stop. You can also ask us not to invite you to research. Or stop everything at once: the unsubscribe link at the foot of any email from us, or “Stop all emails” on your preferences page, stops news and research invitations together. After that, we won’t email you unless you ask us to.
To do any of this, write to privacy@drawma.live. We’ll reply within one month. If you’re unhappy with how we use your information, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint. If you live in the European Union, you can also complain to the data protection authority in your own country. Wherever you live, you may have further rights under your local law. We’d be grateful for the chance to put it right first.
Children
Anyone can be drawn by DRAWMA, whatever their age. Under-18s must be accompanied by a parent or guardian during sessions, and a parent or guardian makes the booking. The early-access list is for the person who will book: if you’re under 18, ask a parent or guardian to join for you. Artists must be 18 or over, and the artist application asks you to confirm it. If you think a child has given us their details without a parent or guardian, write to privacy@drawma.liveand we’ll delete them.
Changes to this notice
We may update this notice, for example if DRAWMA launches. The latest version is always the one on this page, with its date at the top. If a change affects how we use information you’ve already given us, we’ll tell you.