Your privacy matters to us

Nocsha Studio ("we", "us", "our") is a digital design and web development studio serving health, fitness, and wellness businesses across Europe and internationally. We build websites, digital products, and online experiences — delivered entirely remotely.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: hello@nocsha.studio Website: nocsha.studio

We collect information in the following ways:

Information you give us directly When you fill in our contact form, enquire about a project, or send us an email, we collect your name, email address, phone number (if provided), and the content of your message.

Information collected automatically When you visit our website, we may collect your IP address, browser type, device type, pages visited, time spent on pages, and referral source. This is collected via analytics tools to help us improve the site.

Information from project work If you become a client, we may collect additional business information (company name, logo files, content, brand assets) necessary to deliver your project. This is handled under a separate Client Agreement.

We use the information we collect to:

— Respond to your enquiries and project requests — Provide and deliver our web design and development services — Send you relevant information about your project status — Improve our website and service offering — Comply with applicable legal obligations

We do not use your personal data for automated decision-making or profiling. We do not sell your data to third parties under any circumstances.

We process your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies to our European clients. Our legal bases for processing are:

Contractual necessity — when processing is required to fulfil a project agreement with you.

Legitimate interests — when we use analytics to improve our website, or follow up on a genuine business enquiry you initiated.

Legal obligation — when we are required to retain records for tax or regulatory purposes.

Consent — where we have explicitly asked for and received your consent (e.g. subscribing to updates).

Our website uses cookies — small text files stored on your device — to help us understand how visitors use the site.

We use analytics tools (such as Google Analytics or Plausible Analytics) that may set cookies to track page views, session duration, and navigation paths. This data is aggregated and anonymised where possible.

Strictly necessary cookies are used to ensure the website functions correctly. You may disable non-essential cookies through your browser settings. Disabling cookies will not prevent you from using the site, but some features may behave differently.

We retain your personal data only for as long as necessary:

— Enquiry data (contact form submissions): up to 2 years, or until the enquiry is resolved. — Client project data: for the duration of the project plus 7 years, in line with standard business record-keeping requirements. — Analytics data: typically aggregated and retained indefinitely in anonymised form.

You may request deletion of your personal data at any time (see Section 8).

We do not sell or rent your personal data. We may share data with trusted third-party service providers who assist us in operating our business:

— Email providers (e.g. Google Workspace) for communication — Project management tools for client collaboration — Analytics providers for website performance data — Payment processors (e.g. Wise, Payoneer) for invoicing and transactions — Accounting software for financial records

All third-party processors are required to handle your data securely and in accordance with applicable data protection laws. Where your data is transferred internationally, we ensure appropriate safeguards are in place consistent with GDPR requirements.

Depending on your country of residence, you may have the following rights regarding your personal data:

Right to access — request a copy of the personal data we hold about you. Right to rectification — ask us to correct inaccurate or incomplete data. Right to erasure — request deletion of your personal data ("right to be forgotten"). Right to restrict processing — ask us to limit how we use your data. Right to data portability — receive your data in a structured, machine-readable format. Right to object — object to processing based on legitimate interests. Right to withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at hello@nocsha.studio. We will respond within 30 days.

EU and EEA residents: you have the right to lodge a complaint with your local supervisory authority. A full list of EU data protection authorities is available at edpb.europa.eu.

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include:

— Encrypted email communication — Password-protected project management and file-sharing tools — Limited access to personal data on a need-to-know basis — Regular review of our data handling practices

No method of data transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Our website may contain links to third-party websites (such as social media profiles or client sites). We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before submitting any personal information.

Our services are intended for businesses and adults aged 18 and over. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.