Privacy policy

Last updated: August 2026

Who we are

StudioBuild (studiobuild.nl) is the controller for personal data processed to run the platform, digital orders and the client portal. Contact: info@studiobuild.nl. Trade name StudioBuild. KvK 85621293. VAT identification number NL004120733B68.

What data do we process?

We process data you submit via contact, order or Custom forms: name, email, phone, company details and project information. Via the client portal we may also store website content, tickets and files. Payment providers process payment details; StudioBuild does not store full card numbers.

Why we use data

We use data to process digital orders and Custom requests, run the client portal, provide support within the agreed period, issue invoices, and improve our services. We do not sell data to third parties.

Legal bases (GDPR)

Processing is based on: (a) performance of a contract (orders, delivery, portal, support); (b) legal obligations (e.g. invoicing and tax retention); (c) legitimate interests (securing the platform, fraud prevention, service improvement — balanced against your rights); (d) consent where required (optional analytics cookies).

Processors

For payments, hosting, email and storage we may use third-party services (for example payment providers such as Mollie or Stripe, hosting and email services). They process data only as needed to deliver the service. A current processor overview is available on request via info@studiobuild.nl.

International transfers

Some processors may process data outside the EEA. Where that happens we rely on appropriate safeguards (such as EU Standard Contractual Clauses or an adequacy decision) as provided by that processor. Details on request via info@studiobuild.nl.

Security measures

We apply technical and organisational measures appropriate to our scale: HTTPS, access control for admin and portal accounts, hashed passwords, and production payment flows that fail closed when misconfigured. We do not claim ISO 27001, SOC 2 or similar certifications. See also the Security page.

Processing agreements

If you need StudioBuild as a processor for end-user data on a Custom project, a processing arrangement can be agreed digitally on request. Standard website packages typically process your business contact and project data as controller for delivery — not as an enterprise DPA product out of the box.

Retention

We do not keep data longer than needed for the processing purpose or as required by law (for example invoice data under Dutch tax rules). Portal project files are retained while the customer relationship and legal retention require it; deletion requests are handled as described under Your rights.

Your rights

You have the right to access, rectification, erasure, restriction, objection and data portability where applicable, and to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Contact us at info@studiobuild.nl. We respond within a reasonable period and at most within the statutory time limits.

Questions

Questions about this privacy policy? Email info@studiobuild.nl.