Privacy Policy
How we collect, use, and protect your personal data.
1. Who We Are
Quam Studio ("we", "us", "our") is a web development studio providing B2B website design, PWA development, website redesign, and GDPR & performance optimization services. This Privacy Policy explains how we handle personal data when you visit our website or contact us, in accordance with the EU General Data Protection Regulation (GDPR).
2. Data We Collect
We collect only the data necessary for the purposes described below:
- Contact data — name, company, email address, and message content you submit through our contact form.
- Communication data — emails and call notes generated when we correspond with you.
- Technical data — anonymized or pseudonymized information such as browser type, device type, referring page, and pages visited (only with your consent, via our cookie banner).
We do not collect special categories of personal data, and we do not use your data for automated decision-making or profiling.
3. Legal Basis for Processing
- Consent (Art. 6(1)(a) GDPR) — for non-essential cookies and analytics, given via our cookie banner. You may withdraw consent at any time.
- Legitimate interest (Art. 6(1)(f) GDPR) — to respond to your inquiries, operate and secure our website, and maintain business relationships.
- Contract (Art. 6(1)(b) GDPR) — to perform services you've engaged us for, including project communication and invoicing.
- Legal obligation (Art. 6(1)(c) GDPR) — to meet accounting and tax retention requirements where applicable.
4. How We Use Your Data
- To respond to inquiries and provide requested information
- To prepare proposals and deliver contracted services
- To improve our website (aggregated, anonymized statistics only)
- To meet legal and accounting obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Cookies
Our website uses only essential cookies required to operate the site by default. Non-essential analytics cookies are set only after you explicitly consent via our cookie banner. You can change or withdraw your choice at any time by clearing your browser storage for this site and revisiting the banner.
6. Data Retention
- Inquiry data: kept up to 24 months after our last contact, then deleted.
- Client contract data: kept for the duration of the business relationship plus any legally required retention period (typically 6–10 years for accounting records).
- Analytics data (if consented): anonymized or deleted within 14 months.
7. Data Processors
To operate our business we use a limited number of service providers (e.g. email hosting, website hosting) bound by data processing agreements under GDPR Article 28. Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
8. Your Rights Under GDPR
You have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data ("right to be forgotten", Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time (Art. 7(3))
To exercise any of these rights, email privacy@quamstudio.com. You also have the right to lodge a complaint with your local data protection authority.
9. Security
We apply appropriate technical and organizational measures to protect your data, including HTTPS encryption, access controls, and minimized data collection. No method of transmission is 100% secure, but we design our systems to reduce risk accordingly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the current version. Material changes will be highlighted on this page.
11. Contact
Questions about this policy or your data? Contact us at privacy@quamstudio.com or use our contact form.