Privacy Policy
KSTUDIO SIA · Effective date: 2025-10-27
TL;DR
We use your contact details and creative brief to respond to your request and run projects. With your separate consent, we send marketing updates and may match your contact details to advertising audiences (Meta/Google, etc.). You can unsubscribe or withdraw consent at any time. We do not sell personal data.
1) Who we are (Data Controller)
KSTUDIO SIA (trading as "KSTUDIO")
- ●Reg. No.: 40203140189 | VAT: LV40203140189
- ●Address: Skolas Iela 36, Jurmala, LV-2016, Latvia
- ●Contact for data requests:
- ●Authorized representative: Konstantīns Sigulis
2) What data we collect
- ●Contact: name, work email, phone (if provided).
- ●Company: company name, role/team size, country/time zone.
- ●Brief / project info: goals, platforms, formats, deadlines, brand guidelines, links to references/assets.
- ●Marketing preferences: your opt-in/opt-out choices.
- ●Technical data: IP, device/browser, cookie IDs, UTM parameters, on-site events.
- ●Sources: you (forms on Meta/Instagram/Facebook or our site, email, calls); public links you share (e.g., Ads Library).
- ●Sign-in providers: name, email address and profile picture as shared by the provider you sign in with (see below).
2a) Sign-in providers
You can create and access your KSTUDIO account with Google, Meta (Facebook), X or LinkedIn instead of a password. When you do, the provider sends us your name, email address and profile picture. We use them to identify you, to show your name and picture next to your blog comments, and to keep you signed in. We never post on your behalf, never read your contacts or feed, and never share your KSTUDIO activity back with the provider.
You can disconnect KSTUDIO at any time in the provider's settings, and you can ask us to delete the account data on our Data Deletion page. Each provider processes your data under its own policy:
3) How we use data & legal bases (GDPR)
| Purpose | Legal basis | Typical retention | How to opt out |
|---|---|---|---|
| Respond to your inquiry, prepare a proposal, deliver our services | Contract / pre-contract (Art. 6(1)(b)) | up to 24 months after last activity | close the request / ask us to delete |
| Billing, accounting, compliance | Legal obligation / contract (Art. 6(1)(c)/(b)) | up to 5 years | - |
| Analytics, service improvement, security/fraud prevention | Legitimate interests (Art. 6(1)(f)) | up to 24 months (shorter where feasible) | email objection to support@kstudio.lv |
| Email or messenger marketing (news, tips, offers) | Consent (Art. 6(1)(a)) | until unsubscribe or 24 months of inactivity | click Unsubscribe or email us |
| Personalized ads & audience matching (e.g., Meta Custom Audiences, Google Customer Match, Lookalike/Similar) | Consent (Art. 6(1)(a)) | until consent withdrawn | email us; we'll remove you from audiences |
| Informational messages to existing customers about similar services (where permitted) | Legitimate interests / soft opt-in (Art. 6(1)(f)) | until unsubscribe | click Unsubscribe or email us |
If you do not provide the required fields, we may be unable to respond to your request.
4) Personalized ads & audience matching
With your consent, we may hash your email/phone and upload it to platforms (e.g., Meta, Google, TikTok) to create or exclude Custom/Matched Audiences and to build Lookalike/Similar audiences. These platforms act as separate controllers with their own policies. You can withdraw consent at any time; we will stop matching and delete you from our audiences.
5) Who receives your data
- ●Service providers (processors): hosting/cloud, CRM/PM, email delivery, analytics, telephony, IT contractors, under contract and our instructions.
- ●Advertising platforms: Meta, Google, TikTok, etc., as separate controllers when you've consented to marketing/audience matching or interact with their pixels.
- ●Advisors/legal, and public authorities where legally required.
We do not sell personal data.
6) International transfers
Where services are provided outside the EEA/UK, we rely on EU Standard Contractual Clauses (SCCs), adequacy decisions, and additional safeguards as needed.
7) Retention
- ●Leads & correspondence: up to 24 months from last interaction (or earlier on deletion request/consent withdrawal).
- ●Client & finance records: up to 5 years (statutory).
- ●Marketing subscriptions: until unsubscribe or 24 months of inactivity.
- ●Security/analytics logs: typically up to 26 months.
8) Your rights
EEA/UK data subjects can request access, rectification, erasure, restriction, portability, and may object to processing based on legitimate interests. You can withdraw consent at any time (does not affect prior processing).
You may lodge a complaint with the Latvian DPA: Datu valsts inspekcija.
9) Cookies & analytics
We use necessary, analytics, and marketing cookies. Manage preferences via our cookie banner or your browser settings. See our Cookie Policy for details.
10) Security
We apply reasonable technical and organizational measures (encryption in transit, access controls, data minimization). No internet transmission is 100% secure, but we take appropriate steps to protect your data.
11) Children
Our services are aimed at B2B audiences and are not intended for children under 16. We do not knowingly collect children's data.
12) Blog comments
If you sign in and leave a comment on our blog, we process the following.
- ●What we store: the text you wrote, the account it was posted from, and, for abuse prevention only, a salted one-way hash of your IP address plus your browser's user agent string.
- ●What other readers see: your public display name (first name and last initial) and your avatar. Your email address is never shown next to a comment and is never sent to anyone reading the article.
- ●How long: the IP hash and user agent are erased 30 days after a comment is published. Comments we rejected or filed as spam are deleted 90 days after they were written. A published comment stays as long as the article does.
- ●Emails you may get: one transactional notice when somebody replies to your comment. Deleting your comment ends replies to it. This is not marketing and is not part of any subscription.
- ●Reporting: if you report someone else's comment we record which account reported it, so the same person cannot report the same comment twice.
To delete a comment, use Delete under it while signed in. The text is erased immediately, and an empty placeholder remains only so existing replies keep their place. To have the account behind your comments removed as well, write to .
13) Changes to this policy
We may update this policy periodically. The current version and effective date are shown at the top. Material changes may be communicated additionally where appropriate.
14) Contact
- ●Data requests & privacy questions:
- ●Phone: +371 22331979
- ●Postal address: Skolas Iela 36, Jurmala, LV-2016, Latvia
- ●Company details: KSTUDIO SIA, Reg. No. 40203140189, VAT LV40203140189
- ●Authorized representative: Konstantīns Sigulis