Privacy Policy
Fluweel Studio ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you visit our website or contact us, how and why we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).
Last updated: 6 July 2026
Who we are
Fluweel Studio is the data controller responsible for your personal data — meaning we decide how and why it is processed.
- Name: Fluweel Studio
- Registered address: Den Haag, the Netherlands (full registered address to be completed)
- Chamber of Commerce (KvK) number: to be completed
- VAT (BTW) number: to be completed
- Email: office@fluweelstudio.nl
- Phone: +31 6 20908831
If you have any questions about this policy or about how we handle your data, please contact us using the details above.
What personal data we collect
We only collect the personal data we genuinely need. Depending on how you use our website, this may include:
- Contact enquiries. When you complete our contact form or email us, we collect your name, email address, phone number (optional) and the content of your message.
- Technical and usage data. When you visit the website, our hosting provider automatically records limited technical data such as your IP address, browser type and version, device information, the pages you view and the date and time of access. This is standard server-log information used to keep the site secure and available.
- Preferences stored on your device. We store small pieces of information locally in your browser (via
localStorage) to remember your display preferences (such as light or dark theme) and, where applicable, your cookie/consent choices. These stay on your device and are not used to track you.
We do not knowingly collect special categories of personal data (such as data revealing health, ethnicity, religion or political opinions), and we ask that you do not include such information in messages you send us.
How and why we use your data
Under the GDPR we must have a lawful basis for processing your personal data. The table below sets out what we do and why:
| Purpose | Data used | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Responding to your enquiry and discussing a possible project | Name, email, phone, message | Taking steps at your request prior to entering a contract (Art. 6(1)(b)); our legitimate interest in answering enquiries (Art. 6(1)(f)) |
| Providing, securing and maintaining the website | Technical and usage data | Our legitimate interest in a secure, functioning website (Art. 6(1)(f)) |
| Remembering your display and consent preferences | Preferences stored on your device | Your consent, or our legitimate interest in a functional site (Art. 6(1)(a)/(f)) |
| Complying with legal obligations (e.g. administration, tax) | Contact and correspondence records | Compliance with a legal obligation (Art. 6(1)(c)) |
We do not use your data for advertising, we do not carry out analytics-based tracking or profiling, we do not make automated decisions that produce legal effects, and we do not sell your personal data to anyone.
Cookies and local storage
Our website does not use advertising or analytics cookies, and it does not track you across other websites.
- We use a small amount of local storage on your device to remember functional preferences (such as your chosen theme and consent settings). This information never leaves your browser and is not used to identify you.
- When you open an image in the gallery lightbox, the required viewer script and stylesheet are loaded from the jsDelivr content delivery network (
cdn.jsdelivr.net). To deliver these files, the CDN necessarily receives your IP address. We rely on this solely to make the gallery work (Art. 6(1)(f)).
You can clear local storage and block or delete cookies at any time through your browser settings. Doing so will not stop you from using the website, though some preferences may not be remembered.
Who we share your data with
We never sell your personal data. We share it only with trusted service providers ("processors") who help us operate, and only to the extent necessary:
- Our hosting provider, which stores the website and its server logs.
- Our email provider, through which we receive and respond to your messages.
- jsDelivr (CDN), which delivers the gallery viewer files as described above.
We may also disclose personal data where we are legally required to do so, or to establish, exercise or defend legal claims. Where a provider processes data on our behalf, we put an appropriate data-processing agreement in place.
International transfers
We aim to keep personal data within the European Economic Area (EEA). Some service providers (such as the jsDelivr CDN) operate globally, which may involve a transfer of technical data outside the EEA. Where that happens, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy:
- Contact enquiries are kept for as long as needed to handle your request and our ongoing relationship, and thereafter only where required for our legitimate administrative or legal record-keeping, after which they are deleted.
- Server-log data is kept for a short period for security and troubleshooting.
- Preferences on your device remain until you clear them.
How we protect your data
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including transport encryption (HTTPS), limited access to correspondence, and working only with reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your information at all times.
Your privacy rights
Under the GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you;
- Rectification — have inaccurate or incomplete data corrected;
- Erasure — ask us to delete your data ("right to be forgotten") where applicable;
- Restriction — ask us to limit how we process your data;
- Data portability — receive your data in a portable format;
- Object — object to processing based on our legitimate interests;
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, email us at office@fluweelstudio.nl. We will respond within one month, as required by law. Exercising your rights is free of charge in ordinary circumstances.
Complaints
If you believe we have not handled your personal data correctly, we would appreciate the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Dutch data protection authority:
Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl, P.O. Box 93374, 2509 AJ The Hague, the Netherlands.
Children's privacy
Our website is intended for a general, professional audience and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Links to other websites
Our website may contain links to third-party websites. This Privacy Policy applies only to our website, and we are not responsible for the privacy practices of other sites. We encourage you to read the privacy policy of any website you visit.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be published on this page with an updated "Last updated" date. Significant changes will be made clear on the website.
Contact us
If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us:
Fluweel Studio — office@fluweelstudio.nl — +31 6 20908831 — Den Haag, the Netherlands.