Privacy Policy
Last updated: [date]
This page explains what personal data we collect on maddcreative.studio, why, and what you can do about it. Short version: we only collect what we need to talk to you, and we never sell it.
1. Who we are
madd. is a creative studio based in Bucharest, Romania.
- Data controller: [legal name, registered address, registration number, CUI]
- Contact for anything about your data: office@maddcreative.studio
2. What we collect and why
| When | What data | Why | Legal basis (GDPR) |
|---|---|---|---|
| You use the contact form | Name, email, your message | To answer you | Steps before a contract, Art. 6(1)(b), or our legitimate interest in replying, Art. 6(1)(f) |
| You book a call | Name, email, chosen time, anything you add | To set up and hold the call | Steps before a contract, Art. 6(1)(b) |
| You message us on WhatsApp | Phone number, name, messages | To answer you | Art. 6(1)(b) or 6(1)(f) |
| You email us | Email address, your message | To answer you | Art. 6(1)(b) or 6(1)(f) |
| You visit the site | Technical data such as IP address, browser, pages visited | To deliver the site, keep it secure, and count visits | Our legitimate interest, Art. 6(1)(f) |
We don’t ask for more than this, and we don’t use your data for advertising.
3. Cookies and analytics
We don’t use cookies for tracking or ads. Our visitor statistics come from Cloudflare Web Analytics, which works without cookies and only shows us totals, not individual people.
We don’t collect statistics about visitors from the European Union at all: for them, Cloudflare Web Analytics is switched off.
We set one small cookie of our own, called lang. When you pick a language with the RO / EN switch in the footer, we save your choice in it, so we don’t switch you back. It holds only “en” or “ro”, lasts 1 year, belongs to maddcreative.studio alone and is never shared. We set it only when you use the switch, and we never use it to track you, profile you or show you ads. Because you ask for it by using the switch, it falls under the exemption for cookies that are strictly necessary to provide a service you requested, so it needs no consent banner. You can delete it at any time in your browser settings, and the site goes back to your browser’s language.
Our homepage plays a short, muted video hosted on Vimeo. We load it in Vimeo’s “do not track” mode, so Vimeo doesn’t use it to follow you around. When the video loads, Vimeo’s security provider, Cloudflare, sets one technical cookie on Vimeo’s domain, called __cf_bm. It only helps tell real visitors from bots, holds no information that identifies you, and deletes itself after 30 minutes. If your device is set to reduce motion, the video doesn’t load, and neither does this cookie.
Our project videos open on Vimeo, YouTube or Instagram. Once you leave our site, their own privacy policies apply.
4. Who helps us process your data
We use a few trusted services to run the site and talk to you. They only process data on our instructions.
- Google (Workspace): email and calendar bookings
- Cloudflare: hosting, security and analytics
- Web3Forms: delivering contact form messages to our inbox
- Meta (WhatsApp): chat messages
- Vimeo: hosting and playing our videos
We never sell or rent your data.
5. Data outside the EU
Some of these providers may process data outside the European Union, for example in the US. When that happens, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.
6. How long we keep it
- Messages and bookings that don’t turn into a project: up to [12 months] after our last contact.
- Client projects: for the length of the project, then as long as the law requires (for example accounting rules).
- Analytics: only as totals, nothing that identifies you.
7. Your rights
You can ask us to:
- show you the data we have about you
- correct it
- delete it
- limit how we use it
- send it to you or someone else in a usable format
- stop using it, if we rely on our legitimate interest
Just email office@maddcreative.studio. We reply within one month.
You can also complain to the Romanian data protection authority, ANSPDCP, at www.dataprotection.ro.
8. Keeping it safe
We use secure, reputable providers and limit access to your data to the people working on your request.
9. Changes
If we change this policy, we update this page and the date at the top.