2. What Data We Collect & How We Use It

We only collect data when there is a clear, legitimate reason to do so. On nevere.studio, data collection falls into two categories:

A. Contact

When you submit a project brief or reach out via our contact form, we collect the details you provide to us voluntarily.

• When you submit a project brief or reach out via our contact form, we collect the details you provide to us voluntarily.
• Data collected: Your name, email address, company name and industry, and project scope.
• Why we need it: To evaluate your inquiry, discuss your project requirements, prepare proposals, and respond to you.
• Legal basis (GDPR Art. 6(1)(b)): Processing is necessary to take steps at your request prior to entering into a contract.
• How long we keep it: We retain business communications for as long as necessary to fulfill your project or maintain business records (typically up to 3-5 years for tax and legal compliance in Poland). If we don't work together, you can ask us to delete your inquiry at any time.

B. Website Analytics & Performance

To keep our site fast, responsive, and working properly across devices, we collect basic, non-identifying technical analytics.

• Data collected: Anonymized IP addresses, browser type, device type, referral source, pages visited, and time spent on site.
• Why we need it: To analyze traffic patterns, detect technical issues, improve page performance, and ensure smooth user navigation.
• Analytics Providers: We use privacy-focused analytics tool (Vercel Analytics).
• Legal basis (GDPR Art. 6(1)(f)): Our legitimate interest in maintaining and optimizing a secure, high-performance web platform.

3. Cookies & Tracking Technologies

We keep cookie usage to a minimum.

• Essential Cookies: Necessary for the core performance and security of Next.js and site hosting infrastructure.
• Analytics Cookies: Used to count page visits and traffic sources so we can measure performance.

You can configure your browser to block or alert you about cookies, but some parts of the site may not function properly as a result.

4. Who We Share Your Data With

We never sell, rent, or trade your personal data. We only share information with trusted infrastructure providers necessary to run this website and communicate with you:

• Hosting & CDN: Vercel Inc. (Global edge infrastructure hosting nevere.studio)
• Email & Communication: Email Provider - Spaceship Inc (for managing incoming briefs and client messages)
• Analytics: Privacy-conscious analytics platforms operating under strict data protection standards.

All third-party service providers are bound by Data Processing Agreements (DPAs) or GDPR-compliant data protection standards.

5. Where Your Data Is Stored & Transferred

As a studio based in Poland (EU), your data is primarily processed within the European Economic Area (EEA). Where cloud services process data outside the EEA (such as US-based infrastructure like Vercel or Google), data transfers are protected under Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

6. Your Data Rights Under GDPR

Under EU data protection laws, you have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal information from our systems.
• Right to Restrict or Object: You can object to our processing of your data under legitimate interest grounds.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to File a Complaint: You have the right to lodge a complaint with a supervisory authority. In Poland, this is the UODO (Urząd Ochrony Danych Osobowych, uodo.gov.pl).

To exercise any of these rights, simply send an email to contact@nevere.studio

7. Data Security

We take data security seriously. We enforce HTTPS encryption across nevere.studio, utilize modern Next.js security headers, and store communications within secure, password-protected systems. While no system is 100% immune to breaches, we take all reasonable technical and organizational measures to safeguard your information.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our technical setup or legal requirements. The latest version will always be published on this page with an updated Last Updated date.