Privacy Policy

1. Introduction

Welcome to Mesmerized Studio ("we", "us", or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.

Mesmerized Studio operates our website and services (collectively referred to as the "Service"). This Privacy Policy explains how we collect, use, process, and protect information about you when you use our Service.

Our Contact Information

Company: Mesmerized Studio
Location: Netherlands
Email: [email protected]

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy, our Terms & Conditions, and our Cookie Policy.

2. Legal Basis and Data Controller

Mesmerized Studio acts as the Data Controller for your personal data under the General Data Protection Regulation (GDPR) and Dutch data protection laws (AVG).

Our legal basis for processing your personal data includes:

Consent: When you explicitly agree to our processing (e.g., cookie consent, marketing emails)
Contract Performance: To fulfill our services to you
Legitimate Interest: For business operations, security, and service improvement
Legal Obligation: To comply with applicable laws

3. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.

Processing: Any operation performed on personal data, including collection, storage, use, or deletion.

Data Subject: The individual to whom personal data relates (you, as our user).

Service: Our website, applications, and all related services provided by Mesmerized Studio.

Cookies: Small data files stored on your device when you visit our website.

Usage Data: Information collected automatically when you use our Service.

4. Information We Collect

4.1 Personal Information You Provide

When you interact with our Service, we may collect:

Contact Information: Name, email address, phone number (via our contact form)
Business Information: Company name, website, project details
Communication Data: Messages, feedback, support requests
Project Information: Files, designs, project specifications you share
Payment Information: Billing address (payment details are processed by Stripe)
Booking Information: Name, email, and preferred time slots (via Cal.com booking widget)

4.2 Information Collected Automatically

IP address and approximate location
Browser type, version, and language settings
Device information (type, operating system)
Pages visited, time spent, and interaction patterns
Referral sources and exit pages

4.3 Cookies and Tracking Technologies

We use cookies for essential functionality, analytics, marketing, and personalization. For a complete list of cookies, their purposes, and how to manage them, see our Cookie Policy.

5. How We Use Your Information

5.1 Service Provision

Providing and maintaining our services
Processing contact form submissions and responding to inquiries
Scheduling and managing bookings via Cal.com
Customer support and project communication

5.2 Service Improvement

Analyzing usage patterns via Google Analytics 4
Measuring marketing effectiveness via Google Ads and Meta Pixel
Developing new features and improving user experience

5.3 Communication

Sending service-related notifications (project updates, invoices)
Marketing communications (with your explicit consent)
Important policy or service changes

6. Legal Basis for Processing (GDPR Article 6)

Consent (Art. 6.1.a): Marketing communications, non-essential cookies, phone contact for marketing
Contract (Art. 6.1.b): Service delivery, contact form processing, booking management
Legal Obligation (Art. 6.1.c): Tax records, legal compliance
Legitimate Interest (Art. 6.1.f): Website security, analytics (anonymized), business operations

7. Data Sharing and Disclosure

Third-Party Service Providers

We share data with the following third-party providers. Each provider processes data according to their own privacy policy:

Google Tag Manager & Google Analytics 4 — Website analytics and tag management. Privacy Policy
Google Ads — Conversion tracking and remarketing. Privacy Policy
Meta/Facebook — Ad measurement via Pixel and Conversions API. Privacy Policy
Cal.com — Booking and scheduling. Privacy Policy
Stripe — Payment processing for Mesmerized Club subscription. Privacy Policy
Strapi — Headless CMS for content management (no end-user data shared)
Hetzner / Cloudflare — Hosting infrastructure and CDN
Email Provider (SMTP) — For delivering contact form emails

We do not sell your personal data to any third party.

8. International Data Transfers

As we are based in the Netherlands, most data processing occurs within the EU/EEA. Some of our third-party providers (Google, Meta, Stripe) may transfer data outside the EEA. These transfers are protected by:

Adequacy Decisions by the European Commission
Standard Contractual Clauses (SCCs)
Provider-specific data protection frameworks

9. Data Retention

Contact Form Data: Duration of the business relationship plus 2 years
Booking Data: Retained by Cal.com per their policy
Usage Data: 14 months (Google Analytics 4 default)
Marketing Data: Until consent is withdrawn
Financial Records: 7 years (Dutch tax law requirement)
Cookie Consent: 6 months

10. Your Rights Under GDPR

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interest
Right to Withdraw Consent: Withdraw consent at any time (including cookie consent)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by GDPR.

11. Data Security

HTTPS/TLS encryption for all data in transit
Server-side tracking via Google Tag Manager Server-Side for enhanced privacy
Rate limiting and honeypot protection on contact forms
Access controls and secure credential management
Regular security updates and monitoring

12. Children's Privacy

Our Service is not intended for children under 16 years old. We do not knowingly collect data from children under 16.

13. Cookies

Detailed information about the cookies we use, their purposes, and how to manage them is available in our Cookie Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through our website or via email. The "Last updated" date below reflects the most recent revision.

15. Complaints and Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens (AP)
Website: autoriteitpersoonsgegevens.nl

16. Contact Information

Mesmerized Studio
Email: [email protected]
Based in the Netherlands

Last updated: July 11, 2026