Privacy policy.

Strabo Studio(“Strabo”, “we”, “us”) operates the strabo.studio website and the managed hosting platform of the same name. You can contact us about anything in this policy at privacy@strabo.studio.

For the purposes of EU and UK data protection law, Strabo Studio is the data controller for the personal information described below. For information processed on behalf of our customers (their site visitors, their CMS content), Strabo Studio acts as a data processor under each customer's separate data processing agreement.

When you visit strabo.studio we may collect:

• Server access logs (IP address, user agent, request path, timestamp, response status) retained for up to 30 days for security and abuse prevention.
• An anonymous analytics ping (page view, referrer, country at city resolution, device class). We do not set advertising cookies and we do not cross-reference data across other sites.
• A small strabo-locale cookie remembering your last chosen language (English or French) for up to one year.
• Anything you voluntarily send us: your email, message, calendar invite when you book an intro call, or files you share during a project.

When you book an intro call, our booking widget is provided by a third party (Calendly). Calendly will see your name, email, and the meeting metadata you fill in; its own privacy policy applies to that processing.

We use the information above only for the following purposes:

• Running the site (legitimate interest under GDPR Art. 6(1)(f)).
• Replying to enquiries you send us (performance of a contract or pre-contractual steps under Art. 6(1)(b)).
• Aggregate, anonymous performance metrics to improve the site (legitimate interest).
• Honouring legal obligations such as tax records for customers (legal obligation under Art. 6(1)(c)).

We never sell your personal data, and we do not use it to train any model.

We share personal data with a small number of subprocessors that are necessary to run the service:

• Vercel (USA) for hosting and edge delivery.
• Calendly (USA) for the intro-call booking widget on the /book page.
• Google Workspace (USA) for our hello@ and privacy@ inboxes.
• Stripe (USA) for invoicing and payment processing for paid customers.

Each subprocessor is covered by appropriate cross-border safeguards (Standard Contractual Clauses for transfers from the EEA, UK IDTAs, or an applicable adequacy decision).

Retention periods we apply:

• Server logs: 30 days.
• Email correspondence: 24 months, then archived or deleted.
• Customer billing records: as long as legally required for tax compliance in our jurisdiction (typically 7 years).
• Locale cookie: 12 months from your last visit.

If you ask us to delete your data earlier, we will do so within 30 days unless we are legally required to keep it.

Under GDPR, UK GDPR and similar regimes you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion (“right to be forgotten”).
• Object to certain processing or restrict it.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time where we rely on consent.
• Complain to your local supervisory authority (in France, the CNIL).

To exercise any of these rights, email privacy@strabo.studio. We aim to respond within 30 days.

The site uses two cookies:

• strabo-locale:remembers your chosen language. Strictly functional, no consent required.
• vw:remembers a viewport hint to serve a layout matched to your screen. Strictly functional.

We do not use third-party tracking cookies or advertising pixels. If we ever add analytics or marketing cookies we will update this policy and ask for consent first.

We may update this policy from time to time. Material changes will be flagged at the top of the page and announced to customers by email at least 30 days before they take effect. The current version is always available at strabo.studio/privacy.