DRAFT — this page was generated as a starting template and has not been reviewed by counsel. Replace the bracketed placeholders and have it reviewed before relying on it.

This website is currently under construction. Several sections, including the "Start a Project" contact form, are not yet fully active — inquiries submitted through the form are not currently being received or processed.

Privacy Policy

Last updated: 26 August 2026

This Privacy Policy explains how [OCHRA Studio / legal entity name] ("we", "us", "our") collects, uses, and protects personal data when you visit ochra.studio or submit an inquiry through it. We are the data controller for the personal data described below.

1. Who we are

[OCHRA Studio / legal entity name]
[Registered address, if applicable]
Contact: [privacy@ochra.studio]

2. What data we collect

We collect personal data in two ways:

a) Information you provide directly

When you use the "Start a Project" inquiry form, we collect the details you choose to share, which may include: your name, email address, phone number, company name, the type of project you're inquiring about, your style and scope preferences, budget range, timeline, and any additional project details you write in.

b) Information stored locally in your browser

We use your browser's local storage to remember your language preference (English or Romanian) and whether you've already seen the site's intro animation. This information stays on your device and is not transmitted to us or any third party. It is purely functional and is not used for tracking or advertising.

We do not currently use analytics, advertising, or tracking cookies on this site. If that changes, this policy will be updated accordingly.

3. Why we process your data and our legal basis

We use the information you submit through the inquiry form to:

  • Respond to your inquiry and discuss your project
  • Prepare quotes, proposals, or project scoping documents

Our legal basis for this processing is your consent, given by voluntarily submitting the form, and/or our legitimate interest in responding to business inquiries directed at us. We do not use your data for marketing purposes unless you separately opt in, and we do not sell your personal data to third parties.

4. Who we share data with

[As of the date above, inquiries submitted through this site are not yet automatically forwarded to a third-party service — update this section to name the specific service (e.g. a form-handling provider or email service) once one is connected, including a link to that provider's own privacy policy.]

This website is hosted by Netlify, which may process standard technical data (such as IP address and browser type) as part of ordinary web hosting and security operations, independent of what we actively collect. See Netlify's privacy policy for details.

5. How long we keep your data

[Pick and confirm one retention approach: either a fixed period, e.g. "We keep inquiry data for up to 24 months from your last contact with us, after which it is deleted, unless a longer period is required by law or an active project relationship continues," or an open-ended approach, e.g. "We keep your data for as long as needed to respond to your inquiry, or until you ask us to delete it." Either is acceptable practice — just be consistent with what you actually do.]

6. International transfers

Any personal data you submit is processed within the systems described above. If any processor we use stores or processes data outside the European Economic Area, we will ensure an appropriate safeguard (such as an adequacy decision or standard contractual clauses) is in place, and this section will be updated to name that transfer.

7. Your rights

If you are located in the EEA, UK, or another jurisdiction with similar protections, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data
  • Restrict or object to our processing
  • Receive a copy of your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at [privacy@ochra.studio]. If you are in Romania, you also have the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP):

B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, Bucharest, Romania
Email: anspdcp@dataprotection.ro
Phone: +40 31 805 9211
Website: www.dataprotection.ro

If you are elsewhere in the EEA or UK, you may contact your local data protection authority instead.

8. Children

This website is not directed at children, and we do not knowingly collect personal data from anyone under 16.

9. Changes to this policy

We may update this policy as our practices change. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Questions about this policy or how your data is handled can be sent to [privacy@ochra.studio].