Privacy Policy
Last updated: June 2026
This Privacy Policy explains how Steff Black Studio ("we", "us") collects and processes your personal data when you use steffblack.studio, in line with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
Who is responsible
Data controller: Steff Black Studio. Contact: hey@steffblack.studio.
What we collect
- Contact form: your name, email address and message.
- Newsletter: your email address.
- Usage data: anonymous, aggregated analytics (no cookies that identify you individually).
Why we use it (legal basis)
- To reply to your enquiry, based on your request / our legitimate interest.
- To send the newsletter, based on your consent, which you can withdraw at any time.
Who we share it with
Form submissions are processed by our form provider (Web3Forms) and reach us by email. The site is hosted on a content delivery network. We never sell your data.
How long we keep it
We keep enquiry data only as long as needed to handle your request, and newsletter data until you unsubscribe.
Your rights
You can request access, correction, deletion, or portability of your data, and you can object to processing or withdraw consent. Email hey@steffblack.studio. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).