Privacy Policy
We keep data collection to the minimum needed to run our website and deliver your project. This policy explains what we collect, why, and the choices you have.
Last updated September 21, 202601Who we are
Liana Studio (“we”, “us”) is a web design and development agency registered in the Netherlands under Chamber of Commerce (KvK) number 00000000. We are the controller of the personal data described in this policy.
Questions about this policy or your data can be sent to j.suijkerbuijk@hotmail.com.
02What data we collect
We only collect what we need to run our website and deliver our services:
- Contact details — your name, email address, phone number, and company when you email, call, or book a call with us.
- Project information — briefs, files, credentials, and messages you share while we discuss or work on a project.
- Usage data — pages visited, referrer, device and browser type, and approximate location (country level), collected in aggregate through our analytics.
- Performance data — page load and web-vitals metrics collected through Vercel Speed Insights.
We do not knowingly collect data from children, and we do not collect sensitive categories of personal data.
03How we use your data
- To respond to enquiries and prepare quotations.
- To deliver, host, and support the websites and services we build for you.
- To invoice, keep financial records, and meet our legal obligations.
- To understand how our website is used and to improve its speed and content.
- To keep you updated about your project.
We do not sell your personal data and we do not use it for automated decision-making or profiling.
04Legal basis
Under the General Data Protection Regulation (GDPR) we rely on the following grounds:
- Contract — when processing is needed to prepare or perform an agreement with you.
- Legitimate interest — to run and secure our website, measure its performance, and respond to enquiries.
- Legal obligation — for tax and accounting records.
- Consent — where required, for example for any optional marketing communication. You can withdraw consent at any time.
05Cookies and analytics
Our website uses Vercel Web Analytics and Vercel Speed Insights. These tools are privacy-focused: they do not use third-party advertising cookies and do not track you across other websites. Visitors are counted without storing personal identifiers in your browser.
We do not run advertising or retargeting pixels on this website.
06Who we share data with
We share personal data only with service providers who process it on our behalf, under agreements that require them to protect it:
- Hosting and infrastructure providers, such as Vercel and our database provider.
- Email, calendar, and project-management tools we use to communicate and collaborate with you.
- Accounting and payment providers.
We may also disclose data where required by law or to protect our legal rights.
07International transfers
Some of our providers are located outside the European Economic Area. Where that happens, we make sure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
08Retention
We keep personal data only as long as needed for the purposes above. As a guideline, enquiries that do not lead to a project are deleted within 12 months, project files and communication are kept for the duration of the agreement plus a reasonable period afterwards, and invoices are kept for seven years to meet Dutch tax requirements.
09Your rights
You have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected or incomplete data completed.
- Have your data erased, where we have no legal reason to keep it.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time.
To exercise any of these rights, email j.suijkerbuijk@hotmail.com. We will respond within one month. If you believe we are handling your data unlawfully, you can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10Security
We use technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and limiting access to those who need it. No system is completely secure, so if we become aware of a breach that affects you we will notify you and the relevant authority as required by law.
11Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last changed. Significant changes will be communicated by email or on our website.