Privacy Policy

Introduction

At Blok Blok Studio, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

What Data We Collect

We collect information you provide directly to us when you fill out forms on our website:

• •Name
• •Email address
• •Phone number
• •Industry / field of work
• •Website URL (optional)
• •Project details and challenges
• •IP address (for consent verification only)

How We Use Your Data

We use the information we collect to:

• •Respond to your inquiries and provide requested services
• •Send marketing communications (only with your explicit consent)
• •Improve our website and services
• •Comply with legal obligations

Third-Party Services

We use the following third-party services to operate our business:

• •Resend, for sending email communications
• •Vercel: website and application hosting (USA; data protection frameworks and SCCs apply)
• •Slack: internal notifications about new inquiries to our team (limited to name, email, phone, and business type)
• •Cloudflare Turnstile: spam protection on our forms (processes your IP address)
• •Cal.com, appointment scheduling when you book a call with us
• •Meta (Facebook/Instagram): advertising measurement, only with your marketing-cookie consent. With that consent we may also transmit your email address and phone number in hashed (pseudonymized) form to measure ad conversions.
• •Google: advertising measurement (Google Ads), only with your marketing-cookie consent

These services only receive the minimum data necessary for their functionality.

We only load advertising pixels (Meta, Google) if you explicitly accept marketing cookies in our consent banner; otherwise no tracking cookies or analytics services are used.

Data Retention

We retain your personal data for as long as necessary to provide our services and maintain our business relationship. You can request deletion of your data at any time through our Data Rights page.

Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• •Access. Request a copy of all personal data we hold about you
• •Rectification. Request correction of inaccurate data
• •Erasure. Request permanent deletion of your data
• •Object. Object to processing of your data
• •Portability. Export your data in a machine-readable format
• •Withdraw Consent. Withdraw your consent at any time

Exercise your rights on our Data Rights page

Legal Basis for Processing

Under Article 6 of the GDPR, we process your personal data based on the following legal grounds:

• •Consent (Art. 6(1)(a)): When you subscribe to our newsletter or submit a contact form with explicit consent
• •Contractual Necessity (Art. 6(1)(b)): When processing is necessary to fulfill a service agreement with you
• •Legitimate Interest (Art. 6(1)(f)): For internal analytics, improving our services, and protecting the security of our website

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

International Data Transfers

Some of our third-party service providers may process your data outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

• •Vercel: Our hosting provider may process data in the United States. Vercel complies with applicable data protection frameworks.
• •Resend: Our email delivery provider may process data in the United States. Transfers are covered by Standard Contractual Clauses (SCCs).

We only transfer data to countries or organizations that provide an adequate level of protection or where appropriate safeguards (such as SCCs or binding corporate rules) are in place.

Supervisory Authority

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement. You may also contact us first so we can try to resolve the issue directly.