Last updated: August 2025

Privacy Policy

At Seaphy Studio, we respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights in relation to it. It applies to visitors of our website (seaphystudio.com) and to clients who engage our services.

1. Who We Are

Seaphy Studio is a boutique digital marketing agency operating across Spain, the Netherlands, the United Arab Emirates, and the United States.
Data controller: Seaphy Studio — info@seaphystudio.com
For any privacy-related enquiries, please contact us at the email address above.

2. Data We Collect

Contact information — name, email address, company name, and any details you submit through our contact form or via email.
Billing information — payment details are collected and processed exclusively by Stripe. Seaphy Studio does not store card numbers or banking data.
Service data — information you share with us in the course of delivering our services (ad account access, brand assets, analytics credentials, etc.).
Usage data — browser type, pages visited, time on site, and referral source, collected via cookies and analytics tools.

3. How We Use Your Data

To respond to enquiries and provide the services you have requested.
To manage your account, process payments, and send service-related communications.
To improve our website and understand how visitors use it.
To comply with legal obligations.
We do not sell, rent, or trade your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

Contract — processing is necessary to deliver the services you have engaged us for.
Legitimate interest — to operate and improve our website and to respond to enquiries.
Legal obligation — where we are required to retain data for tax, accounting, or regulatory compliance.
Consent — where you have explicitly opted in (e.g. marketing communications). You may withdraw consent at any time.

5. Third-Party Processors

Stripe — payment processing. Their privacy policy applies to all payment data.
Google (Analytics, Ads, Workspace) — website analytics and advertising campaign management.
Meta (Facebook & Instagram) — advertising campaign management on behalf of clients.
Netlify — website hosting and contact form submissions.
All third-party processors are contractually required to handle your data securely and in compliance with applicable data protection laws.

6. International Data Transfers

We operate internationally. Your data may be processed in countries outside the European Economic Area (EEA), including the United States and the UAE.
Where transfers occur outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law.
Client service data is typically retained for the duration of the engagement plus 5 years for legal and accounting purposes.
Contact form submissions are retained for up to 2 years unless you become a client.

8. Cookies

Our website uses cookies to understand how visitors navigate the site and to measure the effectiveness of our content.
Essential cookies — required for the site to function. Cannot be disabled.
Analytics cookies — used to collect anonymous usage statistics (e.g. Google Analytics).
You can control cookie preferences through your browser settings at any time.

9. Your Rights

Access — you have the right to request a copy of the personal data we hold about you.
Rectification — you can ask us to correct inaccurate or incomplete data.
Erasure — you can request deletion of your data, subject to legal retention obligations.
Restriction — you can ask us to limit how we use your data in certain circumstances.
Portability — you can request your data in a structured, machine-readable format.
Objection — you can object to processing based on legitimate interest.
To exercise any of these rights, contact us at info@seaphystudio.com. We will respond within 30 days.

10. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
Access to client data is restricted to team members who require it to deliver the agreed services.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision.
For significant changes, we will notify active clients directly by email.

For any privacy-related questions or to exercise your rights, contact us at info@seaphystudio.com