Andre Blunt Studio

Privacy Policy

Last updated: 10 August 2026

This policy explains what personal data we collect when you use studio.andreblunt.com, why we collect it, who we share it with, and the rights you have over it. We have tried to write it in plain language. If anything is unclear, write to us and we will explain.

1. Who we are

The site studio.andreblunt.com is operated by Andre Blunt Kft(“we”, “us”, “Andre Blunt Studio”). We are the data controller for the personal data described here, which means we decide why and how it is processed.

• Company: Andre Blunt Kft
• Registered address: József körút 69. Fsz. 1. ajtó, 1085 Budapest, Hungary
• Company registration number: 01-09-451918
• EU VAT number: HU32967656
• Contact for privacy questions: hello@andreblunt.com

2. What we collect

We keep data collection to a minimum. Depending on how you use the site, we may process:

Information you give us through the inquiry form

• Your name
• Your email address
• An optional message or project brief (anything you choose to type in)

Information collected automatically

• Basic, aggregated traffic data through Vercel Analytics (for example, which pages are viewed and roughly where visits come from). This is cookieless and is not used to identify you. See section 5.
• If, and only if, you accept marketing cookies: data collected by the Meta Pixel about your visit, used for advertising measurement and retargeting. See section 6.

Information you give us if you book a call

• You can book an introductory call on our own scheduling page at app.andreblunt.com/meet. We ask for your name, your email address, and optionally a note about what you are building, and we record the time slot you chose. This runs on our own systems, not a third-party scheduling platform, so your booking is held by us. See section 4 for the providers that host it.

We do not ask for special-category data (health, religion, and so on). Please do not send it through the form.

3. Why we process it and our lawful basis

Under the General Data Protection Regulation (GDPR), every use of your data needs a lawful basis. Here is ours.

Where the basis is consent, you can withdraw it at any time (see section 9). Withdrawing consent does not affect anything we did lawfully before you withdrew it.

4. Who we share it with (our processors and partners)

We do not sell your data. We share it only with the service providers we need to run the studio, and only for the purposes above. Each is bound by its own data terms.

5. Analytics (cookieless)

We use Vercel Analytics to count visits and see which pages are used. It does not use cookies and does not build a profile of you. Visitors are counted using a temporary hash derived from the request, not a stored identifier, and the session data is discarded within 24 hours. Because it does not identify you, it runs without a consent banner and relies on our legitimate interest (section 3).

6. Cookies and the Meta Pixel (consent-gated)

The site does not load advertising or tracking cookies by default.

The Meta Pixel loads only after you give explicit consent through the cookie banner. If you do nothing, or decline, the Pixel does not run and no data goes to Meta. If you accept, the Pixel fires standard events (a PageView when you load a page, and a Lead event when you submit the inquiry form) and shares that activity with Meta Platforms Ireland for advertising measurement and retargeting.

You can change your mind at any time:

• Use the cookie settings on the site to withdraw consent, which stops the Pixel from loading on future visits.
• Clear cookies in your browser to remove what is already stored.
• Manage ad personalisation in your Meta account settings.

7. How long we keep it

We keep personal data only as long as we need it.

• Inquiries that do not become an engagement: kept while we are in contact and for a reasonable period afterward, then deleted, and in any case within 24 months of our last contact.
• Booked calls: scheduling details kept while relevant to the conversation, then deleted unless the project proceeds.
• Client engagements: kept for the duration of the engagement and for as long as we are required to keep related business records. Hungarian tax and accounting law requires retention of accounting documents for 8 years; records tied to an invoice are kept for that period.
• Analytics: aggregated and short-lived, as described in section 5.
• Meta Pixel data: retained by Meta under its own retention rules.

When a retention period ends, we delete or anonymise the data.

8. Sending data outside the EU

Some of our providers are based in, or transfer data to, the United States. Where that happens, the transfer is protected by recognised safeguards:

• Resend is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses.
• Vercel relies on Standard Contractual Clauses (and, where applicable, the Data Privacy Framework) for transfers.
• Supabase hosts our scheduling database in the European Union (Frankfurt, eu-central-1), so call bookings are stored in the EEA. Supabase Inc. is a United States company, and it relies on Standard Contractual Clauses for any access from outside the EEA, such as technical support.
• Meta (only if you consent to the Pixel) relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for transfers to the United States.

You can ask us for more detail on any of these safeguards using the contact in section 1.

9. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you, and get a copy.
• Rectification of data that is wrong or incomplete.
• Erasure of your data (“right to be forgotten”) where there is no overriding reason to keep it.
• Restriction of processing in certain cases.
• Object to processing based on our legitimate interest, including any analytics.
• Withdraw consent at any time where we rely on consent (for example, the Meta Pixel), without affecting processing done before you withdrew it.
• Data portability, where it applies, to receive your data in a portable format.

To exercise any of these, email hello@andreblunt.com. We will respond within one month. There is normally no charge.

Complaints. If you think we have mishandled your data, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Hungarian supervisory authority:

National Authority for Data Protection and Freedom of Information (NAIH)

Nemzeti Adatvédelmi és Információszabadság Hatóság

Address: H-1055 Budapest, Falk Miksa utca 9-11, Hungary

Postal address: 1363 Budapest, Pf. 9

Phone: +36 (1) 391-1400

Email: ugyfelszolgalat@naih.hu

Web: https://www.naih.hu

10. If we wrote to you: business outreach

This section is for people we contacted directly rather than people who came to the site. Everything above describes data you gave us. This describes data we found.

Where we got your details

From public sources only: your business’s own website and its legal notice or imprint, professional networks such as LinkedIn, trade press, and public commercial registers. In some cases your property is also listed on Andre Blunt Stays, our hotel guide, which selects properties editorially and independently of any commercial approach. We do not buy contact lists, and we do not take contact data from booking platforms or supplier APIs.

What we hold

• Your name and job title
• A work email address and, where published, a work phone number
• The business you work for and publicly available information about it
• A record of what we sent you and anything you sent back

We do not hold private or home contact details, and we do not build profiles beyond what is needed to write you a relevant message.

Why, and our lawful basis

To offer photography, brand and web services we believe are relevant to your business. Our lawful basis is legitimate interest under Article 6(1)(f) GDPR: our interest in reaching potential clients, balanced against your interests. We consider the balance reasonable because the message goes to a work address about a work matter, it is written and sent individually by a person rather than by a mailing system, we contact a small number of businesses rather than run a campaign, and a single word in reply stops it permanently. If you tell us to stop, we stop, and we do not weigh our interest against that.

How long we keep it

If you do not reply, we delete your details within 12 months. If you ask us not to contact you again, we keep the minimum needed to honour that, which is your email address on a suppression list, for as long as we send anything at all. That record exists so we do not write to you a second time.

Your right to object

Absolute, and it costs you one word. Reply “no” to any message and we will not write again. You can also email hello@andreblunt.com and ask us to delete everything we hold about you. All the other rights in section 9 apply here too.

Complaints, if you are in Switzerland

Recipients in Hungary and the EU can complain to NAIH, as set out in section 9. If you are in Switzerland you can instead contact the Federal Data Protection and Information Commissioner:

Federal Data Protection and Information Commissioner (FDPIC)

Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter

Address: Feldeggweg 1, CH-3003 Bern, Switzerland

Phone: +41 (0)58 462 43 95

Web: https://www.edoeb.admin.ch

11. Changes to this policy

If we change how we handle data, we will update this page and change the “last updated” date above. For significant changes, we will make the update more visible on the site.

12. Contact

Questions about this policy or your data:

Andre Blunt Kft · hello@andreblunt.com · József körút 69. Fsz. 1. ajtó, 1085 Budapest, Hungary