Last updated:

Data controller

Seedworks Studio — is the controller of your personal data within the meaning of the GDPR (Regulation (EU) 2016/679).

Data collected

• Contact: name, email address, message (contact form or direct email)
• Billing: name, billing address, payment data (processed by Stripe, not stored by Seedworks Studio)
• Analytics: anonymised usage data if analytics are enabled

Purposes & legal basis

• Responding to contact requests — legitimate interest
• Contract performance and invoicing — contract performance
• Accounting and tax obligations — legal obligation
• Service improvement — legitimate interest

Retention period

• Contact data: 3 years from the last exchange
• Accounting records: 10 years (legal requirement)
• Payment data: managed and retained by Stripe under their own policies

Data recipients

Your data is never sold to third parties. It may be shared with technical sub-processors strictly necessary for the business:

• Stripe — payment processing (United States, PCI DSS certified, Privacy Shield)
• — website hosting
• — transactional email delivery

Your rights

Under the GDPR, you have the following rights:

• Access, rectification and erasure of your data
• Restriction of and objection to processing
• Data portability
• Withdrawal of consent at any time

To exercise these rights: contact@seedworks.studio. You may also lodge a complaint with the CNIL (French data protection authority).