Privacy policy

Last updated: April 1, 2026  ·  Gania Studio®

// 01

Introduction

Gania Studio® ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you visit our website at gania.framer.website or engage with us in connection with our services.

We act as the data controller for all personal information processed in connection with this Site. This policy is written in compliance with the General Data Protection Regulation (GDPR) and applicable French data protection law.

// 02

Information we collect

We may collect the following categories of personal data when you interact with our Site or services:

• Identity data — your name, company name, and job title

• Contact data — email address, phone number, and postal address

• Communication data — messages, enquiries, and correspondence sent to us

• Technical data — IP address, browser type, device identifiers, and operating system

• Usage data — pages visited, time spent on site, referral source, and click behaviour

• Transaction data — billing details and payment records in connection with project engagements

We do not collect sensitive personal data such as health information, political opinions, or biometric data.

// 03

How we collect your data

We collect personal data through the following means:

• Directly from you, when you submit a contact form, send us an email, or enter into a project agreement

• Automatically, via cookies and analytics tools when you browse our Site

• From third parties, such as referral partners or publicly available professional profiles, where relevant to a potential engagement

// 04

How we use your data

We process your personal data only where we have a lawful basis to do so. The purposes for which we use your data include:

• Responding to enquiries and managing client relationships

• Delivering, managing, and invoicing our services

• Sending project updates, proposals, or service-related communications

• Improving our Site's performance and user experience

• Complying with legal and regulatory obligations

• Sending occasional news or studio updates, where you have opted in to receive them

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

// 05

Legal basis for processing

Under the GDPR, we rely on the following legal bases to process your personal data:

• Contractual necessity — to fulfil our obligations under a project agreement

• Legitimate interests — to manage our business, respond to enquiries, and improve our services

• Legal obligation — to comply with applicable laws and regulations

• Consent — for optional communications such as newsletter updates, which you may withdraw at any time

// 06

Cookies

Our Site uses cookies to enhance your browsing experience and gather analytical data. Cookies are small text files stored on your device. We use the following types:

• Essential cookies — required for the Site to function correctly

• Analytics cookies — used to understand how visitors interact with our Site (e.g. via Framer Analytics or similar tools)

• Preference cookies — to remember settings such as language or display preferences

You may manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Site. For full details, please refer to our Cookie Policy.

// 07

Data sharing & third parties

We may share your personal data with trusted third-party service providers who assist us in operating our business, including:

• Email and communication platforms (e.g. Notion, Gmail, or equivalent tools)

• Cloud storage and project management tools

• Payment processors and invoicing platforms

• Website hosting and analytics providers (e.g. Framer)

All third-party providers are contractually required to handle your data securely and only for the purposes we specify. We do not authorise them to use your data for their own purposes.

We may also disclose your data where required by law, court order, or regulatory authority.

// 08

Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Client and project data is retained for 5 years following project completion, in accordance with French commercial law

• Enquiry and contact data is retained for 12 months if no engagement is initiated

• Newsletter subscribers' data is retained until you unsubscribe or request deletion

Once your data is no longer required, it is securely deleted or anonymised.

// 09

Your rights

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access — to request a copy of the personal data we hold about you

• Right to rectification — to request correction of inaccurate or incomplete data

• Right to erasure — to request deletion of your personal data in certain circumstances

• Right to restrict processing — to request that we limit how we use your data

• Right to data portability — to receive your data in a structured, machine-readable format

• Right to object — to object to processing based on legitimate interests or for direct marketing

• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at hello@gania.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) if you believe your data has been processed unlawfully.

// 10

Data security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include encrypted communications, access controls, and regular security reviews of our tools and systems.

While we take all reasonable steps to protect your data, no method of transmission over the internet is entirely secure. We cannot guarantee absolute security but commit to notifying you promptly in the event of a data breach that affects your rights or freedoms.

// 11

International transfers

Gania Studio is based in France and primarily processes data within the European Economic Area (EEA). Where any of our third-party providers operate outside the EEA, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your data in accordance with GDPR requirements.

// 12

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically. Where changes are significant, we will notify active clients directly.