Privacy Policy
Last updated: June 2026
Kyro Studio ("we", "us", "our") is a digital product and marketing studio based in Croatia, European Union, operating this website at kyrostudio.eu. This Privacy Policy explains what information we collect, why we collect it, and the choices you have.
1. Information You Provide
When you reach out through our contact form or "Book a Call" form, we collect the information you submit: your name, email address, phone number (if provided), project details, and budget range.
We use this solely to respond to your enquiry and discuss a potential project with you.
2. Information Collected Automatically
If you accept analytics cookies, we use Google Analytics and Google Tag Manager to understand how visitors use our site — pages viewed, approximate location (derived from your IP address), device and browser type, and the site that referred you.
This data is aggregated and is not used to identify you personally.
3. Cookies
We use two categories of cookies: Necessary (always on — required for the site to function and to remember your cookie choice) and Analytics (optional — Google Analytics & Tag Manager).
No analytics cookies are set until you choose to accept them. You can change your choice at any time via "Manage cookies" in the footer.
4. How We Use Your Information
To respond to your enquiries, deliver our services, and improve our website and communications.
Our legal basis for processing contact-form data is your consent in submitting it and our legitimate interest in responding to your enquiry. Analytics cookies are processed only with your consent.
5. Who We Share It With
We share data with a small number of service providers acting on our behalf: Resend (transactional email delivery, to route your enquiry to our inbox), Google (Analytics & Tag Manager, only with your consent), and Vercel (website hosting).
We do not sell your data or share it with advertisers.
6. Data Retention
Contact form submissions are kept for as long as needed to handle your enquiry, and — if we begin working together — for the duration of our business relationship plus any period required by law (e.g. accounting records).
Analytics data is retained according to Google's default retention settings.
7. International Transfers
Some of our service providers (Google, Resend) may process data outside the European Economic Area. Where this happens, we rely on their Standard Contractual Clauses or equivalent safeguards.
8. Your Rights
Under the GDPR, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. To exercise any of these rights, email [email protected].
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local supervisory authority.
9. Children
Our website is not directed at children under 16, and we do not knowingly collect their personal data.
10. Changes to This Policy
We may update this policy from time to time. The "last updated" date above reflects the latest revision.
11. Contact Us
Questions about this policy? Email us at [email protected].