Andre Blunt Studio
Privacy Policy
Last updated: 22 June 2026
This policy explains what personal data we collect when you use studio.andreblunt.com, why we collect it, who we share it with, and the rights you have over it. We have tried to write it in plain language. If anything is unclear, write to us and we will explain.
1. Who we are
The site studio.andreblunt.com is operated by Andre Blunt Kft(“we”, “us”, “Andre Blunt Studio”). We are the data controller for the personal data described here, which means we decide why and how it is processed.
- Company: Andre Blunt Kft
- Registered address: József körút 69. Fsz. 1. ajtó, 1085 Budapest, Hungary
- Company registration number: 01-09-451918
- EU VAT number: HU32967656
- Contact for privacy questions: studio@andreblunt.com
2. What we collect
We keep data collection to a minimum. Depending on how you use the site, we may process:
Information you give us through the inquiry form
- Your name
- Your email address
- An optional message or project brief (anything you choose to type in)
Information collected automatically
- Basic, aggregated traffic data through Vercel Analytics (for example, which pages are viewed and roughly where visits come from). This is cookieless and is not used to identify you. See section 5.
- If, and only if, you accept marketing cookies: data collected by the Meta Pixel about your visit, used for advertising measurement and retargeting. See section 6.
Information you give us if you book a call
- You can book an introductory call on our own scheduling page at app.andreblunt.com/meet. We ask for your name, your email address, and optionally a note about what you are building, and we record the time slot you chose. This runs on our own systems, not a third-party scheduling platform, so your booking is held by us. See section 4 for the providers that host it.
We do not ask for special-category data (health, religion, and so on). Please do not send it through the form.
3. Why we process it and our lawful basis
Under the General Data Protection Regulation (GDPR), every use of your data needs a lawful basis. Here is ours.
| What we do | Why | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Receive and reply to your inquiry; discuss a possible project | To answer you and take steps toward a possible engagement at your request | Art. 6(1)(b) steps before a contract, and where the message goes beyond a project request, Art. 6(1)(a) your consent in submitting the form |
| Schedule and hold an introductory call | To arrange the meeting you requested | Art. 6(1)(b) steps before a contract, at your request |
| Measure site traffic with cookieless analytics | To understand what is useful and keep the site working well | Art. 6(1)(f) our legitimate interest in a functioning, improvable website, balanced against your privacy (no identification, no cookies) |
| Run the Meta Pixel for advertising measurement and retargeting | To measure and improve our advertising | Art. 6(1)(a) your consent, given through the cookie banner. The Pixel does not load unless you accept |
Where the basis is consent, you can withdraw it at any time (see section 9). Withdrawing consent does not affect anything we did lawfully before you withdrew it.
4. Who we share it with (our processors and partners)
We do not sell your data. We share it only with the service providers we need to run the studio, and only for the purposes above. Each is bound by its own data terms.
Resend: email delivery. When you submit the inquiry form, the message is delivered to our inbox through Resend. Resend processes your name, email, and message in order to deliver that email to us.
Privacy: https://resend.com/legal/privacy-policy · Data terms: https://resend.com/legal/dpa
Vercel: hosting and cookieless analytics. The site is hosted on Vercel, and Vercel Analytics measures traffic without cookies.
Privacy: https://vercel.com/legal/privacy-policy · Analytics privacy: https://vercel.com/docs/analytics/privacy-policy
Supabase: database hosting. If you book an introductory call, the booking (your name, email, chosen time, and any note) is stored in our own scheduling system, which runs on a Supabase-hosted database in the EU. Supabase holds the data on our behalf and does not use it.
Privacy: https://supabase.com/privacy · Data terms: https://supabase.com/legal/dpa
Meta Platforms Ireland Ltd.: advertising (only if you consent). If you accept marketing cookies, the Meta Pixel shares data about your visit with Meta for advertising measurement and retargeting. For this activity, we and Meta act as joint controllers for the collection of the data, and Meta acts as an independent controller for what it does with it afterward. Meta Platforms Ireland Ltd. is at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Privacy: https://www.facebook.com/privacy/policy · Cookies: https://www.facebook.com/policies/cookies
5. Analytics (cookieless)
We use Vercel Analytics to count visits and see which pages are used. It does not use cookies and does not build a profile of you. Visitors are counted using a temporary hash derived from the request, not a stored identifier, and the session data is discarded within 24 hours. Because it does not identify you, it runs without a consent banner and relies on our legitimate interest (section 3).
6. Cookies and the Meta Pixel (consent-gated)
The site does not load advertising or tracking cookies by default.
The Meta Pixel loads only after you give explicit consent through the cookie banner. If you do nothing, or decline, the Pixel does not run and no data goes to Meta. If you accept, the Pixel fires standard events (a PageView when you load a page, and a Lead event when you submit the inquiry form) and shares that activity with Meta Platforms Ireland for advertising measurement and retargeting.
You can change your mind at any time:
- Use the cookie settings on the site to withdraw consent, which stops the Pixel from loading on future visits.
- Clear cookies in your browser to remove what is already stored.
- Manage ad personalisation in your Meta account settings.
7. How long we keep it
We keep personal data only as long as we need it.
- Inquiries that do not become an engagement: kept while we are in contact and for a reasonable period afterward, then deleted, and in any case within 24 months of our last contact.
- Booked calls: scheduling details kept while relevant to the conversation, then deleted unless the project proceeds.
- Client engagements: kept for the duration of the engagement and for as long as we are required to keep related business records. Hungarian tax and accounting law requires retention of accounting documents for 8 years; records tied to an invoice are kept for that period.
- Analytics: aggregated and short-lived, as described in section 5.
- Meta Pixel data: retained by Meta under its own retention rules.
When a retention period ends, we delete or anonymise the data.
8. Sending data outside the EU
Some of our providers are based in, or transfer data to, the United States. Where that happens, the transfer is protected by recognised safeguards:
- Resend is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses.
- Vercel relies on Standard Contractual Clauses (and, where applicable, the Data Privacy Framework) for transfers.
- Supabase hosts our scheduling database in the European Union (Frankfurt, eu-central-1), so call bookings are stored in the EEA. Supabase Inc. is a United States company, and it relies on Standard Contractual Clauses for any access from outside the EEA, such as technical support.
- Meta (only if you consent to the Pixel) relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for transfers to the United States.
You can ask us for more detail on any of these safeguards using the contact in section 1.
9. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and get a copy.
- Rectification of data that is wrong or incomplete.
- Erasure of your data (“right to be forgotten”) where there is no overriding reason to keep it.
- Restriction of processing in certain cases.
- Object to processing based on our legitimate interest, including any analytics.
- Withdraw consent at any time where we rely on consent (for example, the Meta Pixel), without affecting processing done before you withdrew it.
- Data portability, where it applies, to receive your data in a portable format.
To exercise any of these, email studio@andreblunt.com. We will respond within one month. There is normally no charge.
Complaints. If you think we have mishandled your data, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Hungarian supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)
Nemzeti Adatvédelmi és Információszabadság Hatóság
Address: H-1055 Budapest, Falk Miksa utca 9-11, Hungary
Postal address: 1363 Budapest, Pf. 9
Phone: +36 (1) 391-1400
Email: ugyfelszolgalat@naih.hu
Web: https://www.naih.hu
10. Changes to this policy
If we change how we handle data, we will update this page and change the “last updated” date above. For significant changes, we will make the update more visible on the site.
11. Contact
Questions about this policy or your data:
Andre Blunt Kft · studio@andreblunt.com · József körút 69. Fsz. 1. ajtó, 1085 Budapest, Hungary