Privacy Policy — Data Stored in the EU Under GDPR | NK Studio
Legal information

Privacy Policy

In short: we collect only what you leave in the form or the chat yourself, store it on servers in the European Union and do not pass it to third parties for advertising. The details are below.

Updated 6 September 2026GDPRServers in the EU

If you need a copy of your data or want it deleted, write to info@nkaistudio.com. We reply within 30 days, and there is no charge.

Who we are and what this document covers

The website nkaistudio.com is owned by NK Studio, a studio based in Spain that brings AI into everyday business operations through ready-made modules: Website, CRM, AI agent, AI content and AI branding.

This document explains what data we receive through the website, why we need it, how long we keep it and what you can do with it. It is written to meet the requirements of the European Union's General Data Protection Regulation (GDPR).

What data we receive

When you submit an enquiry. Your name, phone number, preferred messenger, email address and what you tell us about your business. You enter all of this yourself; only the name and phone number are required.

When you write to the chat on the website. The text of the conversation and a technical session identifier, so the conversation does not start over when you return to the page.

When you simply browse the website. Anonymised visit statistics: pages viewed, referral source, device type and approximate region. We do not link this to your name.

We do not request or store payment details, documents or passport information.

Why we need this data

  • To reply to your enquiry and discuss your project.
  • To correspond with you about the project once work has started.
  • To understand which pages and advertising channels bring people to us, so we do not waste budget.
  • To meet legal obligations: accounting, tax and responses to official requests.

The legal basis for processing is your consent, which you give by submitting the form, and our legitimate interest in responding to your enquiry.

Marketing emails

We do not send marketing emails to anyone who has not asked for them. If you have submitted an enquiry, we write to you only about that enquiry. You can opt out of any correspondence with a single message.

Who we share data with

We do not sell your data or pass it on for third-party advertising. Data is processed only by the services the website cannot run without:

  • Hosting and database — servers in the European Union.
  • Enquiry notifications — Telegram and an automation service, so we see your message straight away.
  • Web analytics — Google Analytics, Microsoft Clarity, and the Meta and TikTok pixels. They receive anonymised data about behaviour on the website, not your name or phone number.

Some of these services are located outside the European Union. Transfers are made under the European Commission's Standard Contractual Clauses.

Client data inside our modules

If you are our client and use the CRM module or the AI agent, the system will hold data belonging to your own clients. Here the roles change: you are the controller of that data, and we process it on your instructions.

Each business's data is isolated: your database is never mixed with those of other clients, and the staff of one company cannot see another company's leads. Within your own team, you manage access yourself. The servers are located in the European Union.

How long we keep data

  • An enquiry that did not lead to a project — up to 12 months, then deleted.
  • Project correspondence and documents — for the duration of the work and three years afterwards, as required by contract and accounting legislation.
  • Anonymised analytics — according to the retention period of the relevant service, usually up to 14 months.

At your request we delete data sooner, except where the law requires us to keep a document.

Your rights

Under the GDPR you can:

  • find out what data we hold about you and receive a copy of it;
  • correct an inaccuracy;
  • request deletion;
  • restrict processing or object to it;
  • withdraw your consent at any time; this does not affect the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with a supervisory authority. In Spain this is the Agencia Española de Protección de Datos.

Write to info@nkaistudio.com and we will reply within 30 days. There is no charge for this.

Cookies

The website needs technical cookies; without them the forms and language selection do not work. Analytics and advertising scripts are loaded with a delay, after you have started using the page.

You can disable them in your browser settings. The website will continue to work, but we will no longer see anonymised visit statistics.

Changes to this document

If the rules change, we will update this page and change the date at the top. Material changes apply only to new enquiries; nothing is applied retroactively.

Contact

Questions about data processing, or requests for a copy or deletion of your data:

Discuss a project