Studio 17 respects your privacy and aims to process only the personal data needed to operate this website, respond to enquiries and understand website performance where you have allowed analytics.
1. Who we are
The data controller is H&P DOMUS CREATIVE LTD, trading as Studio 17, a Cyprus private limited company registered under number HE 493285. Its registered office is Kopaidos 9, 4152 Limassol, Cyprus.
For privacy questions or requests, email contact@studio17.world.
2. Personal data we process
- Contact and enquiry data: name, email address, optional company and phone number, requested service, indicative budget, message, website language and your consent to be contacted.
- Correspondence: information contained in emails and later communications with us.
- Technical and security data: request information such as IP address and basic server logs used for delivery, reliability, abuse prevention and rate limiting.
- Analytics data, only after consent: page views, session statistics, approximate location, browser, device and interaction information collected through Google Analytics.
- Preference data: selected website language and your analytics consent choice stored on your device.
Please do not submit special-category or highly sensitive personal data through the contact form.
3. Why we use data and our legal bases
- To review and respond to an enquiry and take steps you request before entering a contract.
- To manage business correspondence and deliver agreed services where processing is necessary for a contract.
- To protect the website, prevent misuse and maintain reliable operations based on our legitimate interests in security and service administration.
- To measure website use through Google Analytics only with your consent. You may withdraw that consent at any time through .
- To keep records or disclose information where necessary to comply with a legal obligation or establish, exercise or defend legal claims.
We do not use website data for automated decisions that produce legal or similarly significant effects, and we do not sell personal data.
4. Service providers, sharing and international transfers
We disclose data only where necessary to operate the website and our business. Relevant recipients may include Vercel for hosting and security, Resend for delivery of contact-form emails, Google Analytics after consent, Google Workspace for published Careers and News content, and professional advisers or authorities where required by law.
Some providers may process data outside the European Economic Area. Where required, we rely on recognised safeguards such as adequacy decisions, Standard Contractual Clauses or another lawful transfer mechanism. External websites reached through our links process data under their own notices.
5. How long we keep data
- Enquiries and correspondence: normally up to 24 months after the last meaningful interaction, unless a longer period is required for an active client relationship, legal obligation or legal claim.
- Contact delivery: copies may remain in Studio 17 and Resend email systems according to operational, security and backup retention.
- Security and hosting records: only for as long as reasonably needed for security, troubleshooting and provider operations.
- Analytics: user-level data is intended not to be retained for more than 14 months; aggregated reports may remain available for longer. Google Analytics cookies may last up to two years unless you withdraw consent or clear them sooner.
- Language and consent preferences: remain on your device until changed or cleared.
6. Your data-protection rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
We may need to verify your identity before completing a request. Some rights are not absolute, and lawful retention duties may apply.
7. Security, children and policy changes
We use proportionate technical and organisational measures to protect personal data, but no internet transmission or storage method can be guaranteed completely secure. This website is intended for business audiences and is not directed to children. If you believe a child has provided data, contact us so we can review and delete it where appropriate.
We may update this policy when our website, providers or legal obligations change. The date above identifies the current version.
8. Contact and complaints
Send privacy requests to contact@studio17.world. You also have the right to complain to the Cyprus Office of the Commissioner for Personal Data Protection, or to the supervisory authority where you live or work.
Cyprus Commissioner: Kypranoros 15, 1061 Nicosia, Cyprus; commissioner@dataprotection.gov.cy; dataprotection.gov.cy.