Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Steff Black Studio ("we", "us") collects and processes your personal data when you use steffblack.studio, in line with the EU General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

Who is responsible

Data controller: Steff Black (trading as Steff Black Studio), registered in the Netherlands. Contact: hey@steffblack.com.

What we collect

• Contact form: your name, email address and message.
• Newsletter: your email address.
• Usage data: anonymous, aggregated analytics (no cookies that identify you individually).

Why we use it (legal basis)

• To reply to your enquiry, based on your request / our legitimate interest.
• To send the newsletter, based on your consent, which you can withdraw at any time.

Who we share it with

Form submissions are processed by our form provider (Web3Forms) and reach us by email. The site is hosted on a global content delivery network (Cloudflare). These providers may process data on servers outside the EEA; where they do, the transfer relies on appropriate safeguards such as the EU Standard Contractual Clauses. We never sell your data.

How long we keep it

We keep enquiry data only as long as needed to handle your request, and newsletter data until you unsubscribe.

Your rights

You can request access, correction, deletion, or portability of your data, and you can object to processing or withdraw consent. Email hey@steffblack.com. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).