Privacy Policy

Who processes your data

Your data is processed by Cozynat, the studio operating this website. For any question about your data, write to us through the contact form or the messenger listed on the site — we answer personally.

The company is currently being registered. As soon as registration is complete we will add full legal details here.

What we collect

Nothing you haven't deliberately sent us, with one exception: the technical request data your browser transmits automatically.

• —Enquiry form data: name, email, optionally a messenger handle, business name, website or Instagram link, a description of the task, an approximate budget and the services you selected.
• —Technical request data: IP address, country derived from that IP, browser language, device and browser type, the page the enquiry was sent from, and the referring site.
• —Correspondence, if you emailed or messaged us.

Why we need it

We do not sell your data, do not share it with advertising networks, and do not use it for profiling or automated decision-making about you.

• —To answer your enquiry and discuss the project — impossible without an email or messenger handle.
• —To carry out the work and invoice you, if we agree to work together.
• —To understand which countries and pages enquiries come from, so we don't spend budget on advertising where it doesn't work.
• —To protect against spam: we limit how many enquiries one address can send per hour.

Legal basis

We process your enquiry to respond to your request and, where relevant, to enter into a contract — you initiate the contact yourself. Technical request data is processed on the basis of our legitimate interest in protecting the site from spam and understanding where enquiries originate. For visitors from the EU this corresponds to Articles 6(1)(b) and 6(1)(f) GDPR.

Where the data is stored

Enquiries are stored in Google Cloud Firestore in the europe-west4 region (Netherlands). The website runs on Google Cloud infrastructure. We deliberately chose a European region so data doesn't leave the EU without reason.

Only the studio owner can access enquiries, through a protected admin panel secured by a two-factor Google account. No third parties have access.

Who we share it with

We do not share your data with third parties for their own purposes. Technically it is processed by infrastructure providers acting on our instructions:

• —Google Cloud and Firebase — website hosting and database.
• —An email delivery provider — solely to notify us of a new enquiry, where that feature is enabled.

We may disclose data where required by law, upon an official request from a competent authority.

How long we keep it

• —Enquiries that didn't lead to a project — up to 24 months, then deleted.
• —Client data where we did work together — for as long as needed to fulfil obligations and meet accounting requirements.
• —Technical anti-spam counters — up to 24 hours.

Your rights

You can ask us at any time to:

• —show you what data we hold about you;
• —correct inaccurate data;
• —delete your data;
• —restrict or object to processing;
• —provide your data to you or another company in a machine-readable format.

Just write to us from the address the enquiry came from. We respond within 30 days, usually much sooner. If you believe we are infringing your rights, you can complain to the Ukrainian Parliament Commissioner for Human Rights, or, if you live in the EU, to your national supervisory authority.

California residents have additional rights under the CCPA. To be explicit: we do not sell personal information and do not share it for cross-context behavioural advertising.

Children

This site is intended for business owners. We do not knowingly collect data from anyone under 16. If such data reaches us, we delete it.

Changes to this policy

If we change this policy, the updated version appears on this page with a new date. Material changes are not applied retroactively to enquiries already received.