EN EnglishES Español
Start a project
Legal

Privacy Policy

Effective date: October 2026

1. Data Controller

Zafiro Studio is the data controller responsible for your personal data.

For any queries, contact: hello@zafiro-studio.com

2. Information We Collect

We may collect:

  • Name and contact details (email, phone number)
  • Business information
  • Enquiry details
  • Technical data (IP address, browser type, usage data)

3. How We Collect Data

We collect data through:

  • The enquiry form on this website
  • Direct communication (email, phone, messaging platforms)
  • Technical logs kept by our hosting provider when you visit the website

When you send the enquiry form, the details you enter (name, email address, optional phone number and business name, project type, optional budget range and your message), together with the page and language you used, are delivered to us by email through our email delivery provider, Resend. A short confirmation is also sent to the email address you gave. We do not store enquiries on the website itself and we do not add you to a mailing list. To protect the form from abuse, it uses Cloudflare Turnstile, which checks that the enquiry is being sent by a person using technical signals from your browser and connection, and one-way hashed forms of your IP address, email address and message may be held for up to 24 hours to limit repeated submissions.

4. How We Use Your Data

We use your data to:

  • Provide and manage services
  • Respond to enquiries
  • Improve website performance and user experience
  • Maintain internal records

5. Legal Basis for Processing

We process your data under:

  • Contractual necessity (to deliver services)
  • Legitimate interests (business operations and improvement)
  • Consent (where required, e.g. marketing communications)

6. Data Sharing

We do not sell personal data.

We may share your data with trusted third parties where necessary, including:

  • Hosting and security providers (Cloudflare)
  • Email delivery providers (Resend, for messages sent through the enquiry form)
  • Payment processors, where you pay for our services

All third parties are required to process data securely and in compliance with applicable laws.

7. International Data Transfers

Where data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

8. Data Retention

We retain data only as long as necessary:

  • Client records: up to 6 years
  • Enquiries: up to 12 months

9. Your Rights

Under data protection laws, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO) or the Spanish Agencia Española de Protección de Datos (AEPD)

10. Cookies

We do not use advertising, analytics or tracking cookies.

If you choose a language with the language selector, we store that choice in a cookie called zafiro_lang for up to 12 months so the website opens in the same language next time. It contains only "en" or "es" and is not used for any other purpose.

On the contact page, the country Cloudflare associates with your connection is used only to pre-select pounds or euros in the budget field. It is not stored or sent with your enquiry. If you change the currency yourself, that choice is kept in your browser's local storage so the form remembers it.

Our hosting provider, Cloudflare, may set strictly necessary security cookies to protect the website from abuse, and may provide us with aggregated, cookie-free traffic statistics.

The homepage shows a client's website (Nest Collective) running live inside a preview window. It loads after the rest of the page, and that website, not Zafiro Studio, controls what it loads and any cookies or data it uses. If your browser asks for reduced motion or data saving, a still image is shown instead.

You can control or delete cookies through your browser settings.

11. Data Security

We implement appropriate technical and organisational measures to protect your data.

However, no system is completely secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be published on this page.

14. Contact

For any data protection enquiries: hello@zafiro-studio.com