LEGAL
Privacy Policy
What personal data we collect, why we collect it, who we share it with, and how you exercise your rights over it.
01Who is responsible for your data
Net Studio LLC is the data controller for the personal data described in this policy.
| Controller | Net Studio LLC, a Missouri limited liability company |
|---|---|
| Address | 1501 South Greeley Hwy, Ste C #1386, Cheyenne, WY 82007 |
| Privacy contact |
02What we collect
Information you give us
- Enquiries. When you use the contact form or write to us: your name, work email, company, the service you are interested in, and the content of your message.
- Engagement data. When you become a client: contact details of the people we work with, billing details, and the information needed to deliver the work.
- Training participation. For training services: participant names, professional email addresses, attendance, and any exercises or questions submitted during the session.
Information we receive from payment processing
Payments are handled by our payment processor. We receive confirmation of payment, the amount, the date, and limited billing details. We never receive or store your full card number.
Information collected automatically
Our web host records standard server logs, including IP address, date and time of request, pages requested, and browser type. These are used for security and to keep the site running.
03Cookies and tracking
This website does not set cookies, does not use advertising or analytics trackers, and does not profile visitors. The contact form works entirely in your browser: submitting it opens your own email client with a pre-filled message. No form data is transmitted to or stored on our servers.
If you follow a link to a payment page, that page is operated by our payment processor under its own privacy policy and may set its own cookies.
04Why we process your data, and on what legal basis
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Responding to your enquiry and preparing a quote | Steps taken at your request prior to a contract (Art. 6(1)(b)) | 3 years from last contact |
| Delivering the services and managing the engagement | Performance of a contract (Art. 6(1)(b)) | Duration of the engagement, then 5 years |
| Invoicing, accounting, and tax records | Legal obligation (Art. 6(1)(c)) | As required by applicable tax law, generally 7 years |
| Security of the website and prevention of abuse | Legitimate interest (Art. 6(1)(f)) | 12 months for server logs |
| Sending occasional updates to existing clients | Legitimate interest, with opt-out in every message (Art. 6(1)(f)) | Until you opt out |
We do not sell personal data, and we do not use it to train artificial intelligence models.
05Who we share it with
We share personal data only with service providers who process it on our instructions, under a written agreement, and only as far as their role requires:
| Provider | Role | Location |
|---|---|---|
| Notion Labs, Inc. | Project and client documentation | United States |
| Stripe, Inc. | Payment processing and invoicing | United States / Ireland |
| o2switch | Website hosting and business email | France |
| Affiliated companies and subcontractors | Delivery of services | United States, France, Madagascar |
We may also disclose data where the law requires it, or where it is necessary to establish, exercise, or defend a legal claim.
06International transfers
We operate from the United States and work with affiliated companies and subcontractors in France and Madagascar. Personal data originating in the European Economic Area or the United Kingdom may therefore be transferred outside those territories.
Neither the United States (absent certification under an applicable framework) nor Madagascar benefits from a general adequacy decision of the European Commission. Where we transfer personal data to those countries, we rely on the European Commission's Standard Contractual Clauses, together with supplementary technical and organisational measures where required. You may request a copy of the safeguards in place by writing to us.
07How we protect your data
We apply technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access limited to the people who need it, multi-factor authentication on the systems that support it, and contractual confidentiality obligations for staff and subcontractors.
No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the competent supervisory authority and, where required, you, within the time limits set by applicable law.
08Your rights
Depending on where you live, you may have the right to:
- obtain confirmation of whether we process your data, and a copy of it;
- have inaccurate data corrected;
- have your data deleted, where we have no overriding obligation to keep it;
- restrict or object to processing based on our legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent;
- not be subject to a decision based solely on automated processing that produces legal effects concerning you.
To exercise any of these, write to . We respond within one month. We may need to verify your identity before acting on a request.
If you are in the EU or the UK
You may lodge a complaint with your national supervisory authority. In France, that is the CNIL.
If you are a California resident
You may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and request correction. We do not sell or share personal information as those terms are defined under the CCPA, and we will not discriminate against you for exercising these rights.
09Children
Our services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, write to us and we will delete it.
10Changes to this policy
We may update this policy. The effective date at the top of the page tells you when it was last revised. Where a change materially affects how we use data we already hold, we will notify affected clients directly.
11Contact
Questions about this policy or about how we handle your data: