Privacy Policy

Mar 19, 2025

1. Introduction

Welcome to Mesmerized Studio ("we", "us", or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.
Mesmerized Studio operates our website and services (collectively referred to as the "Service"). This Privacy Policy explains how we collect, use, process, and protect information about you when you use our Service.
Our Contact Information:
  • Company: Mesmerized Studio
  • Location: Netherlands
  • Email: hello@mesmerized.studio
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy and our Terms of Service.

2. Legal Basis and Data Controller

Mesmerized Studio acts as the Data Controller for your personal data under the General Data Protection Regulation (GDPR) and Dutch data protection laws.
Our legal basis for processing your personal data includes:
  • Consent: When you explicitly agree to our processing
  • Contract Performance: To fulfill our services to you
  • Legitimate Interest: For business operations and service improvement
  • Legal Obligation: To comply with applicable laws

3. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation performed on personal data, including collection, storage, use, or deletion.
Data Subject: The individual to whom personal data relates (you, as our user).
Service: Our website, applications, and all related services provided by Mesmerized Studio.
Cookies: Small data files stored on your device when you visit our website.
Usage Data: Information collected automatically when you use our Service.

4. Information We Collect

4.1 Personal Information You Provide
When you interact with our Service, we may collect:
  • Contact Information: Name, email address, phone number
  • Business Information: Company name, job title, business address
  • Account Information: Username, password, profile preferences
  • Communication Data: Messages, feedback, support requests
  • Project Information: Files, designs, project specifications you share
  • Payment Information: Billing address (payment details are processed by third-party processors)
4.2 Information Collected Automatically
Usage Data includes:
  • IP address and location data
  • Browser type, version, and language settings
  • Device information (type, operating system, unique identifiers)
  • Pages visited, time spent, and interaction patterns
  • Referral sources and exit pages
  • Date and time stamps of visits
4.3 Cookies and Tracking Technologies
We use various types of cookies and similar technologies:
Essential Cookies: Required for basic website functionality
  • Session management
  • Security features
  • Load balancing
Analytics Cookies: Help us understand website usage
  • Google Analytics (anonymized)
  • Internal analytics tools
Preference Cookies: Remember your settings and choices
  • Language preferences
  • UI customizations
  • Form data retention
Marketing Cookies: Used for targeted advertising (with your consent)
  • Social media integration
  • Remarketing campaigns
  • Conversion tracking
You can manage cookie preferences through your browser settings or our cookie consent tool.

5. How We Use Your Information

We process your personal data for the following purposes:
5.1 Service Provision
  • Providing and maintaining our services
  • Processing transactions and managing accounts
  • Customer support and communication
  • Delivering requested services and content
5.2 Service Improvement
  • Analyzing usage patterns and performance
  • Developing new features and functionality
  • Conducting user research and feedback analysis
  • Quality assurance and testing
5.3 Communication
  • Sending service-related notifications
  • Marketing communications (with consent)
  • Newsletter and updates (with opt-out option)
  • Important policy or service changes
5.4 Legal and Security
  • Compliance with legal obligations
  • Fraud prevention and security monitoring
  • Protecting our rights and property
  • Resolving disputes and enforcing agreements
5.5 Business Operations
  • Internal record keeping
  • Financial reporting and accounting
  • Business analysis and planning
  • Merger, acquisition, or asset transfer preparation

6. Legal Basis for Processing (GDPR Article 6)

For each processing purpose, our legal basis is:
  • Consent (Art. 6.1.a): Marketing communications, non-essential cookies
  • Contract (Art. 6.1.b): Service delivery, account management
  • Legal Obligation (Art. 6.1.c): Tax records, legal compliance
  • Legitimate Interest (Art. 6.1.f): Analytics, security, business operations

7. Data Sharing and Disclosure

7.1 Third-Party Service Providers
We may share your data with trusted service providers who assist us:
  • Cloud Hosting: AWS, Google Cloud (data processing agreements in place)
  • Analytics: Google Analytics (IP anonymization enabled)
  • Payment Processing: Stripe, PayPal (PCI-DSS compliant)
  • Email Services: Mailchimp, SendGrid
  • Customer Support: Zendesk, Intercom
  • Marketing Tools: HubSpot, Google Ads, Facebook Ads
7.2 Legal Requirements
We may disclose your information when required by:
  • Dutch or EU law
  • Valid legal process or government request
  • Protection of our rights and safety
  • Investigation of fraud or security issues
7.3 Business Transfers
In case of merger, acquisition, or asset sale, your data may be transferred to the new entity with the same privacy protections.
7.4 With Your Consent
We may share information for other purposes with your explicit consent.

8. International Data Transfers

As a Netherlands-based company, your data is primarily processed within the EU/EEA. When we transfer data outside the EU/EEA, we ensure adequate protection through:
  • Adequacy Decisions: Transfers to countries with adequate protection
  • Standard Contractual Clauses: EU-approved data transfer agreements
  • Binding Corporate Rules: For multinational service providers
  • Your Explicit Consent: For specific transfer situations

9. Data Retention

We retain your personal data only as long as necessary:
Account Data: Duration of account plus 3 years for legal compliance Usage Data: 2 years for analytics and service improvement Marketing Data: Until you withdraw consent or object Financial Records: 7 years as required by Dutch law Support Communications: 3 years after case closure Legal Documentation: As required by applicable retention laws
You can request earlier deletion of your data, subject to legal obligations.

10. Your Rights Under GDPR

As a data subject, you have the following rights:
10.1 Right of Access (Art. 15)
Request a copy of your personal data we hold and information about how we process it.
10.2 Right to Rectification (Art. 16)
Correct inaccurate or incomplete personal data.
10.3 Right to Erasure (Art. 17)
Request deletion of your personal data when:
  • No longer necessary for original purpose
  • You withdraw consent
  • Data has been unlawfully processed
  • Required for legal compliance
10.4 Right to Restrict Processing (Art. 18)
Limit how we use your data in certain circumstances.
10.5 Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
10.6 Right to Object (Art. 21)
Object to processing based on legitimate interests or for direct marketing.
10.7 Rights Related to Automated Decision-Making (Art. 22)
Protection against solely automated decision-making, including profiling.
10.8 Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
To exercise your rights, contact us at: hello@mesmerized.studio
We will respond within one month of receiving your request.

11. Data Security

We implement comprehensive security measures:
11.1 Technical Safeguards
  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication systems
  • Automated backup and disaster recovery
  • Network security and firewalls
11.2 Organizational Measures
  • Staff training on data protection
  • Privacy by design principles
  • Data processing agreements with vendors
  • Incident response procedures
  • Regular policy reviews and updates
11.3 Limitation Acknowledgment
While we use industry-standard security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

12. Children's Privacy

Our Service is not intended for children under 16 years old. We do not knowingly collect personal data from children under 16. If you believe we have collected information from a child under 16, please contact us immediately, and we will take steps to delete such information.

13. California Privacy Rights (CCPA)

For California residents, you have additional rights:
  • Right to Know: What personal information we collect and how we use it
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: We do not sell personal information
  • Right to Non-Discrimination: Equal treatment regardless of privacy choices
To exercise these rights, contact us at hello@mesmerized.studio.

14. Cookies and Your Choices

14.1 Managing Cookies
You can control cookies through:
  • Browser settings (Chrome, Firefox, Safari, Edge)
  • Our cookie consent banner
  • Third-party opt-out tools
14.2 Do Not Track
We respect Do Not Track signals and do not track users who have enabled this setting.
14.3 Advertising Choices
Opt out of interest-based advertising:

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make changes:
  • We will notify you via email (if you have an account)
  • We will post a notice on our website
  • We will update the "Last Updated" date
  • Significant changes will include a 30-day notice period
We encourage you to review this Privacy Policy regularly.

16. Complaints and Supervisory Authority

If you have concerns about our data practices:
  1. Contact us first: hello@mesmerized.studio
  2. Dutch Supervisory Authority: Autoriteit Persoonsgegevens (AP)
You have the right to lodge a complaint with the supervisory authority without prejudice to other remedies.

17. Contact Information

For any questions about this Privacy Policy or our data practices:
Mesmerized Studio
  • Email: hello@mesmerized.studio
  • Based in Netherlands
We aim to respond to all privacy inquiries within 5 business days.
This Privacy Policy is governed by Dutch law and complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Our socials

Follow us on social media for the latest updates and inspirations.

© 2025 Mesmerized Studio All rights reserved.

Our socials

Follow us on social media for the latest updates and inspirations.

© 2025 Mesmerized Studio All rights reserved.

Our socials

Follow us on social media for the latest updates and inspirations.

© 2025 Mesmerized Studio All rights reserved.