Privacy policy
How Noviq Studios collects, uses and protects the personal data of people who visit this site or request a proposal.
1. Who this policy covers
This privacy policy explains how Noviq Studios, operated by Harshit Rajasekaran (“Noviq Studios”, “we”, “us”), a sole proprietorship based in the Netherlands (KvK 42087386), handles personal data collected through noviqstudios.nl (the “Site”). Contact: hellonoviqstudios@gmail.com.
2. What we collect, and why
The contact form
The contact form asks for your name, your email address, what you need and a short message (required), and optionally your business name. You also tick a box to agree that we may use these details to reply. This data is used only to understand your project and prepare a written proposal, nothing more.
When you send the form, your details go to this Site's own form endpoint, which runs on our hosting provider, Cloudflare. The endpoint first checks that the request comes from a person (see “Spam protection” below), then sends your details to our inbox by email, through Resend, an email delivery service that we use only for that purpose (see “Who else sees your data”). Your email address is set as the reply address, so our answer goes straight to you. From that point, it's handled like any other business email: read by us, replied to, and kept as a normal correspondence record.
Spam protection
To keep automated spam out, the contact page uses Cloudflare Turnstile, a check that runs in your browser when you open that page and usually needs nothing from you. To tell people from bots, it processes technical signals such as your IP address, your browser's user agent and details of the secure connection. When you send the form, our endpoint passes the result of the check, together with your IP address, to Cloudflare to confirm it. Cloudflare processes these signals for us to run the check, and also uses them to improve its bot detection, as described in Cloudflare's Turnstile Privacy Addendum.
Tools that run in your browser
The “Draw your homepage” tool draws its plan from your answers entirely in your browser. Nothing you enter there is stored or sent to us. If you choose “Use this as my brief”, your answers (business name, type of business and main goal) are carried over to the contact form in the page address (URL), so they can appear in your browser history and in the technical data our host processes (see “Who else sees your data”). We only receive them if you then send the form.
The page-speed figures shown on this Site are measured in your own browser, from the performance data it already keeps. Nothing is sent anywhere.
What we do not collect
We do not use analytics or advertising cookies, and this Site sets no cookies of its own (see Cookies and browser storage), we do not ask for payment details through the Site, and we do not knowingly collect data from children.
3. Legal basis for processing
Under the EU General Data Protection Regulation (GDPR), we process the data described above on the basis of your consent (ticking the consent box on the contact form) and our legitimate interest in responding to enquiries about our services and in keeping the Site and its contact form secure and free of spam. Where we rely on your consent, you can withdraw it at any time by emailing us; this does not affect processing that took place before you withdrew it.
5. How long we keep it
Enquiries sent through the contact form, and related email correspondence, are kept for as long as reasonably needed to respond to you and, if you become a client, for the duration of the engagement plus the period required for our own bookkeeping obligations. You can ask us to delete correspondence that isn't needed for those purposes. Resend, which delivers the form email to us, keeps its own copy of the message and its delivery log for 30 days and then deletes them.
6. Your rights
Under the GDPR you have the right to ask us to: show you the personal data we hold about you; correct it if it's inaccurate; delete it; restrict or object to our processing of it; and receive a copy in a portable format. To exercise any of these, email hellonoviqstudios@gmail.com. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
8. Changes to this policy
If we change how we handle personal data, for example if we add analytics tools, we'll update this page and the “last updated” date above, and where required, ask for your consent again. Questions about this policy: hellonoviqstudios@gmail.com.

