Privacy Policy

This Privacy Policy explains how Studio A ("we", "us", or "our") collects, uses, and protects your personal data when you visit studio-a.fit (the "Website") or contact us through one of our forms. We are committed to handling your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Belgian law.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

Company number (KBO/BCE): BE07 67673 539
Email: arne@studio-a.fit

If you have any questions about this policy or how we handle your data, you can reach us at the email address above.

2. What data we collect

We only collect the data you choose to provide through our two contact/booking forms on the Website. This includes:

• Name
• Email address
• Phone number
• The content of your message (which may include any other information you decide to share with us, such as your booking preferences or questions)

When you visit the Website, our infrastructure provider (Cloudflare) also automatically processes limited technical data — see Section 6 for details.

We do not knowingly collect special categories of data (such as health information). Please avoid including sensitive personal details in your message unless strictly necessary.

3. Why we use your data and our legal basis

We will not use your data for purposes unrelated to those listed above without first informing you and, where required, obtaining your consent.

4. How long we keep your data

We retain your personal data only for as long as necessary for the purposes described above:

• Enquiry and booking data: kept for as long as needed to handle your request and for a reasonable period afterwards to manage any follow-up, after which it is deleted. [CONFIRM YOUR RETENTION PERIOD — e.g. 12 or 24 months after last contact]
• Where we have a legal obligation to retain certain records (for example, for accounting purposes if a booking leads to a paid service), we keep those records for the period required by law.

5. Who we share your data with

We do not sell your personal data. We may share it with:

• Service providers who help us operate the Website and our business (such as our hosting and infrastructure provider, Cloudflare). These providers act as processors on our behalf and are only permitted to use your data as instructed by us.
• Authorities or third parties where we are legally required to do so.

6. Cookies, analytics, and Cloudflare

Our Website uses Cloudflare as an infrastructure, content delivery, and security provider. To deliver and protect the Website, Cloudflare processes limited technical data such as your IP address and basic request information. This is used to keep the site fast, available, and secure (for example, to mitigate malicious traffic).

If we use Cloudflare Web Analytics, please note that it is privacy-focused: it does not use cookies and does not track or fingerprint individual visitors across websites. It only provides us with aggregated, anonymous insights about how the Website is used.

We do not use advertising or third-party marketing cookies. If we introduce any cookies that are not strictly necessary in the future, we will request your consent first.

Note for review: If you also use Cloudflare features that set cookies (e.g. certain bot-management or "Always Use HTTPS" edge functions), or if you add any other tracking later, this section should be updated accordingly.

7. International data transfers

Some of our service providers, including Cloudflare, are organisations that may process data outside the European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place — such as the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision — so that your data remains protected to the standard required under GDPR.

8. How we protect your data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, and disclosure. This includes the security measures provided by our infrastructure provider. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict how we process your data;
• Object to processing based on our legitimate interests;
• Data portability — receive your data in a structured, commonly used format;
• Withdraw consent at any time, where processing is based on consent (this does not affect the lawfulness of processing carried out before withdrawal).

To exercise any of these rights, contact us at arne@studio-a.fit. We will respond within the timeframe required by law (normally one month).

You also have the right to lodge a complaint with the Belgian Data Protection Authority:

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. We encourage you to review this page periodically.

11. Contact

For any questions about this Privacy Policy or your personal data, please contact: