Privacy.

Who runs this site

Blackloft Studio is a creative studio registered in Latvia, in the European Union.

Legal entity: SIA Black Loft. Registration number: 40203220910. VAT: LV40203220910. Registered address: Vagonu street 21A, Riga, Latvia, LV-1009.

For anything on this page, write to hello@blackloft.studio.

What we collect

Three things, no more:

• Server logs. Every request to the site leaves an entry with your IP address, the page requested, and the time. Standard for any web server.
• Form data. If you fill in the contact form, we keep what you wrote and the email address you gave us.
• Email. If you write to us directly, the email sits in our inbox until the project closes or you ask us to delete it.

Cookies are covered separately on the cookies page.

Why we collect it

Under GDPR, every piece of data needs a legal basis. Ours:

• Legitimate interest. Server logs keep the site running and let us spot abuse.
• Consent. The contact form runs because you choose to send it. Same for any non-essential cookies.
• Contract. If we work together, we keep what is needed to run the project and bill it.
• Legal obligation. Tax law in Latvia requires us to keep some records for seven years.

How long we keep it

• Server logs: 30 days, then deleted.
• Contact form submissions that do not turn into projects: 18 months.
• Project files and correspondence: for the life of the project, then 7 years for tax.
• Marketing list, if you opt in: until you unsubscribe.

Who we share it with

Only the providers that make the studio run. Each is bound by a data-processing agreement.

• The hosting provider for this site.
• Our email provider.
• Our accounting and tax provider.
• Tax and government authorities, when the law requires it.

We do not sell data. We do not run advertising trackers. We do not share contact details with third parties for marketing.

Where the data sits

Inside the European Economic Area, under EU law, with one exception: some of our tooling is hosted in the United States under the EU-US Data Privacy Framework. The list of providers and their location is available on request.

Your rights under GDPR

You can:

• Ask what data we hold on you.
• Ask us to correct it.
• Ask us to delete it.
• Ask us to stop using it for a specific purpose.
• Receive a copy in a portable format.
• Withdraw consent at any time, where consent is the legal basis.

Email hello@blackloft.studio for any of the above. We answer within 30 days.

If you are not happy with our answer, you can file a complaint with the Latvian data protection authority, Datu valsts inspekcija.

Changes to this page

This page changes when our practice changes. The "last updated" date at the top reflects the latest revision. Material changes (new providers, new purposes) are flagged in the page header for 30 days.