Privacy Policy

Griffara Studio LLC is a creative studio registered in Wyoming, United States.

In this Privacy Policy, “Griffara”, “we”, “us” and “our” refer to Griffara Studio LLC.

For questions about this Privacy Policy or the handling of personal information, contact: info@griffara.com

The Griffara website does not currently contain contact forms, user accounts, newsletter registration, appointment booking, payment functionality, file uploads or other mechanisms through which personal information is submitted directly to the website.

However, limited information may be processed when you visit the website or choose to communicate with us.

This may include:

• technical information associated with your visit, such as your IP address, browser type, device information, approximate access time, requested pages and security-related identifiers;
• information you voluntarily provide when contacting Griffara by email or WhatsApp, such as your name, email address, telephone number, company information, project details and the contents of your communication;
• information you choose to provide through an external social platform after following a link from our website.

Please do not send sensitive personal information unless it is genuinely necessary for your enquiry.

We may process information for the following purposes:

• to operate, deliver and protect the website;
• to detect and prevent abuse, fraud or security threats;
• to respond to enquiries and communications;
• to understand a prospective client’s project or business requirements;
• to prepare, discuss or perform requested services;
• to maintain appropriate business and administrative records;
• to comply with legal obligations;
• to establish, exercise or defend legal claims.

We do not use information collected through the website for automated decision-making or profiling.

Depending on your location and the circumstances, we may rely on one or more of the following grounds when processing personal information:

• your consent, where you have deliberately chosen to provide information or initiate communication;
• steps requested by you before entering into a contract;
• performance of a contract;
• our legitimate interests in operating and securing the website, responding to enquiries and managing our business, provided those interests do not override your rights;
• compliance with a legal obligation;
• the establishment, exercise or defence of legal claims.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

The website is hosted through Lovable and may use Cloudflare or related infrastructure for delivery, performance and security.

When the website is accessed, hosting and infrastructure providers may automatically process limited technical information. This can include an IP address, browser and device information, request time, requested page, referrer information and security-related identifiers.

This information may appear in server, security or access logs. It is used to deliver the website, maintain its reliability, diagnose technical problems and protect it against malicious activity.

Some infrastructure-level retention details are controlled by the relevant service providers and may not be directly configurable or visible within the website project.

The website does not currently use analytics cookies, advertising cookies, marketing pixels or behavioural-tracking technologies.

Essential infrastructure providers may use strictly necessary technologies, including security or deployment-related cookies, to deliver and protect the website. The technical audit identified infrastructure cookies including __cf_bm and __dpl.

These technologies support functions such as security, bot detection, network management and reliable website delivery. They are not used by Griffara for advertising or behavioural profiling.

The website also uses temporary session storage to preserve or restore scroll position during the browsing session. This information remains within the browser session and is not used to identify or profile visitors.

Because the website currently uses only essential or limited functional technologies and does not use analytics, advertising or marketing tracking, no non-essential cookie-consent banner is presently displayed.

If non-essential technologies are introduced in the future, this Policy and the website’s consent mechanism will be reviewed before those technologies are activated.

The website’s approved fonts are hosted locally and are not retrieved from Google Fonts or another external font provider when a visitor loads the website.

Website videos and visual assets are delivered through the project’s own hosting or content-delivery environment and are not embedded from social-media or public video platforms unless expressly indicated.

Media may autoplay visually where this forms part of the website experience, but the website does not intentionally begin audio without deliberate visitor interaction.

Griffara does not currently use:

• Google Analytics;
• Google Tag Manager;
• Meta Pixel;
• LinkedIn Insight Tag;
• TikTok Pixel;
• Hotjar;
• Microsoft Clarity;
• PostHog;
• advertising cookies;
• behavioural analytics;
• cross-site tracking;
• remarketing technologies.

We do not sell personal information or use website visitor information for targeted advertising.

If analytics or marketing technologies are introduced in the future, they will be assessed before activation and this Privacy Policy will be updated. Where required, appropriate consent will be obtained before non-essential technologies are used.

The /conversation page provides links through which you may choose to contact or visit Griffara using:

• WhatsApp;
• email;
• Instagram;
• Facebook.

The Griffara website does not transmit your message or contact details to these services before you deliberately select the relevant destination.

When you select an external channel, you leave the Griffara website or open an application operated by another provider. Any information you subsequently provide may be processed under that provider’s own terms and privacy policy.

When you contact Griffara by email or WhatsApp, we process the information you voluntarily provide for the purpose of receiving, understanding and responding to your communication and, where appropriate, discussing or delivering requested services.

The website may contain links to external services and websites, including WhatsApp, Instagram and Facebook.

Ordinary external links do not, by themselves, send visitor information to those services before the link is selected. Once you follow an external link, the destination provider may collect information according to its own privacy practices.

Griffara is not responsible for the content, availability or privacy practices of external websites and platforms. We encourage you to review their privacy information before providing personal information.

We may share limited personal information only where reasonably necessary with:

• website hosting, infrastructure and security providers;
• professional advisers, such as legal, accounting or compliance advisers;
• service providers assisting with authorised business operations;
• public authorities or other parties where disclosure is required by law;
• parties involved in establishing, exercising or defending legal claims;
• a successor or relevant party in connection with a legitimate business reorganisation, acquisition or transfer.

We do not sell or rent personal information.

Service providers should process information only for the relevant service or authorised purpose and subject to appropriate safeguards where required.

Griffara Studio LLC is registered in the United States and may communicate with clients, prospective clients and visitors in other countries.

Our service providers may also process information in countries other than the country in which you live. As a result, personal information may be transferred internationally.

Where applicable law requires it, we will seek to use appropriate safeguards for international transfers. These may include contractual protections, recognised transfer mechanisms or other lawful safeguards made available under the relevant data-protection framework.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for any related legal, contractual, accounting, security or record-keeping requirements.

The applicable period depends on factors including:

• the nature and purpose of the communication;
• whether a business relationship or contract develops;
• the need to maintain project or transaction records;
• applicable limitation periods;
• legal, regulatory and tax obligations;
• the need to resolve disputes or protect legal rights.

Enquiries that do not lead to an ongoing relationship will not be retained indefinitely without a legitimate reason.

Technical logs and essential security data are retained according to the operational and security settings of the relevant hosting and infrastructure providers.

When information is no longer required, we will delete it, anonymise it or allow it to be securely removed according to the systems in which it is held.

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No website, communication channel or electronic-storage system can be guaranteed to be completely secure. Visitors should therefore avoid sending unnecessary sensitive or confidential information through ordinary email, social media or messaging platforms.

Depending on where you live and the law that applies, you may have rights concerning your personal information, including the right to:

• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion of information in certain circumstances;
• request restriction of processing;
• object to certain processing based on legitimate interests;
• withdraw consent where processing relies on consent;
• request transfer of information where data portability applies;
• receive information about how your personal information is processed;
• submit a complaint to an appropriate data-protection authority.

These rights are not absolute and may be subject to legal conditions, exceptions or identity-verification requirements.

To make a privacy request, contact: info@griffara.com

We may request sufficient information to verify your identity and understand the scope of your request. We will respond within the timeframe required by the law applicable to the request.

You may also have the right to complain to the data-protection authority responsible for your location. We encourage you to contact us first so that we have an opportunity to address your concern.

The website and Griffara’s services are directed towards businesses and professional audiences and are not designed for children.

We do not knowingly collect personal information from children through the website. If you believe that a child has provided personal information to Griffara, contact us at info@griffara.com so that the situation can be reviewed.

We may update this Privacy Policy when the website, our services, our providers or applicable privacy requirements change.

The current version will remain available on this page, and the “Last updated” date will identify the latest revision.

Material changes affecting how personal information is handled will be communicated in an appropriate manner where required.

For questions, concerns or requests relating to privacy or personal information, contact:

Griffara Studio LLC
Wyoming, United States
info@griffara.com