Privacy Policy

1. Who we are

The data controller is "SHPATIK STUDIO" S.R.L., the company operating this website. You can reach us at hello@shpatikstudio.com. Full company details are in our Legal Notice.

2. What we collect

• Enquiry data — when you use our contact or sample-report forms: your name, email address, any project link, and the message you send. If you arrived via a campaign link, we also record which one (referral source, campaign parameters) alongside your enquiry, so we know what brought you here.
• Technical data — standard server and security logs (e.g. IP address, browser type) generated when you visit, used to keep the site secure and available.
• Analytics data — by default, privacy-friendly, cookieless usage statistics (aggregate page views and referrers). This does not identify you and does not set cookies. Cookie-based analytics and advertising measurement run only with your consent.
• Optional marketing cookies — Google Analytics 4, used to measure Google Ads campaign performance, and only with your explicit consent via a cookie banner. See our Cookie Policy for detail.

3. Why we use it (lawful bases)

• To respond to your enquiry — performance of a contract or steps taken at your request before entering one (Art. 6(1)(b)).
• To keep the site secure and working — our legitimate interests (Art. 6(1)(f)).
• Marketing cookies / analytics that set cookies — your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Who we share it with

We use a small number of trusted processors, each bound to protect your data:

• Brevo — email delivery and contact management (your enquiry data).
• Vercel — website hosting and delivery, plus cookieless aggregate traffic and performance analytics (Vercel Analytics and Speed Insights).
• Cloudflare — DNS and content delivery / security.
• Plausible Analytics — cookieless, aggregate analytics.
• Google (Analytics 4 / Google Ads) — measurement and campaign attribution. These load only if you accept marketing cookies; see our Cookie Policy.

We never sell your personal data.

5. International transfers

Some processors are located outside the EU/EEA — including in the United States (for example Vercel, Cloudflare and, where you have accepted marketing cookies, Google). Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. EU representative (Article 27)

No EU representative is currently appointed under Article 27 GDPR. EU data subjects can exercise their rights or raise questions by emailing hello@shpatikstudio.com, which we monitor directly.

7. How long we keep it

We keep enquiry data for as long as needed to answer you and, where relevant, to manage an ongoing client relationship, after which it is deleted or anonymized. Security logs are kept for a short period only.

8. Your rights

Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your data, and to data portability. You can exercise any of these by emailing hello@shpatikstudio.com. You also have the right to complain to your local data protection authority.

9. Cookies

See our Cookie Policy for details on the cookies we use and how to manage your choices.

10. Changes

We may update this policy from time to time. The date at the top reflects the latest version.

11. Contact

Questions about your data? Email hello@shpatikstudio.com.