Security and trust.

What we collect, and why

The website collects information only when you choose to give it: a project enquiry, a job application, or your cookie choices. We use it to reply to you and to run the site. We do not sell it. The details, including how long we keep things, are in our Privacy Policy.

How we protect it

• Limited access. Enquiries and applications are stored in our own database. They can only be read by authorised staff who sign in with individual accounts, each with a defined role (administrator or editor). Only administrators can export or delete submissions.
• Strong account protection. Staff passwords are never stored as text. They are stored as salted, one-way hashes (PBKDF2-SHA256) and must be at least 12 characters. Sign-in sessions use secure, HttpOnly cookies that expire after seven days, repeated failed sign-ins are temporarily blocked, and administrators can disable an account or end its sessions immediately.
• Safe forms. Everything submitted through our forms is validated and size-limited. Forms are rate-limited per visitor and include a hidden trap that catches automated spam.
• Safe uploads. The staff-only media library accepts image files only. Each file is checked by its actual contents rather than its name, and formats that can carry scripts are refused.
• Protection against forged requests. Actions that change content in the staff area need a signed-in session plus a request header that other websites cannot send, and are only accepted from our own site.
• Privacy by default. Analytics cookies are off until you opt in, we set no advertising cookies, and you can withdraw consent at any time from “Cookie settings” in the footer. See the Cookie Policy.
• Kept out of search. The staff area is not indexed by search engines.

Report a security concern

If you believe you have found a vulnerability or a problem with how we handle data, please email privacy@teamunwritten.com with a short description, the page or feature involved, and steps to reproduce it. Please do not access, change or share other people’s data while investigating, and give us reasonable time to fix the issue before you share details publicly. We will acknowledge your report and keep you informed.

Security questionnaires and contracts

If your organisation needs us to complete a security questionnaire, sign a data processing agreement, or answer due-diligence questions before we work together, tell us what you need through the contact form or at privacy@teamunwritten.com, and we will respond.

This page

Last updated 13 October 2026. It covers Team Unwritten Studio Pvt. Ltd. and this website. Security for a specific engagement is agreed in that engagement’s contract.