Privacy Policy

1. Data Controller

The data controller for personal data collected via this website is:

2. What Data We Collect

We collect personal data only when you voluntarily provide it through our contact form. This includes:

• Your name
• Your email address
• Your company name (optional)
• Your project brief and budget range

We also collect anonymised usage data via PostHog Analytics (EU region, no cross-site tracking, no cookies without consent). This includes page views, browser type, and country. None of this is personally identifiable without your contact form submission.

3. How We Use Your Data

Contact form data is used exclusively to:

• Respond to your project enquiry
• Send you a proposal or follow-up questions
• Maintain records of client communication for ongoing projects

We do not use your personal data for marketing purposes without your explicit consent, and we never sell or share your data with third parties for their own marketing.

The legal basis for processing is GDPR Article 6(1)(b) (processing necessary to take steps at your request prior to entering a contract) and Article 6(1)(f) (legitimate interest in responding to business enquiries).

4. Data Retention

Contact form submissions are retained for a maximum of 24 months from the date of receipt, or for the duration of any ongoing project relationship, whichever is longer. Emails and project files related to active or completed client projects are retained for 5 years for legal and accounting purposes.

Anonymous analytics data is retained for 12 months.

5. Third-Party Services

We use the following third-party processors:

• PostHog (EU): anonymised web analytics, hosted in the EU. PostHog Privacy Policy.
• Google Fonts: font files loaded from Google's CDN. Your IP address is exposed to Google when fonts load. Google Privacy Policy.

6. Your Rights Under GDPR

As a data subject under GDPR, you have the right to:

• Access: request a copy of your personal data we hold
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your personal data
• Portability: receive your data in a structured, machine-readable format
• Restriction: request that we limit processing of your data
• Object: object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@rbstudio.hu. We will respond within 30 days.

You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): www.naih.hu.

7. Cookies

This site does not use cookies for advertising or tracking. PostHog is configured in a cookieless mode where possible. The session is used only to generate a CSRF token to protect the contact form from cross-site request forgery attacks; this is deleted when your browser session ends.

8. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. This includes HTTPS encryption, CSRF protection on all forms, server-side input validation, and access controls on email accounts.

9. Changes to This Policy

We may update this privacy policy from time to time. The 'Last updated' date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the revised policy.

10. Contact

For any privacy-related questions or requests, please contact us at hello@rbstudio.hu.