Privacy Policy
Last updated: 23 July 2026
This Privacy Policy explains how Natif Studio collects, uses and protects personal data when you visit this website, contact us, request a proposal, work with us or interact with us online.
Who is responsible for your data
Natif Studio is an independent digital strategy studio based in France.
Website operator and data controller: Natif Studio
Website: natif.studio
Privacy contact: privacy@natif.studio
For some client projects, Natif Studio may process personal data on behalf of a client. In those situations, the client normally remains the data controller and Natif Studio acts as a data processor under the relevant agreement.
Personal data we collect
Depending on how you interact with us, we may collect:
- your name, email address, telephone number and other contact details
- the name of your business, organisation or project
- your role or professional information
- information submitted through our contact forms
- details about your requirements, objectives, budget, preferred timing and proposed project
- correspondence, meeting notes, proposals and other communications
- contractual, invoicing and payment information
- documents, content, images or other materials you provide for a project
- basic technical information, such as your IP address, browser, device type, pages visited and approximate location
- cookie preferences and information collected through permitted analytics technologies
- information you choose to share through Facebook, Instagram or other third-party platforms
Please do not send sensitive personal information through our website forms unless it is necessary and we have agreed in advance how it should be handled.
How we collect information
We may collect personal data:
- directly from you when you submit a form, email us, speak with us or work with us
- automatically when you visit the website, subject to your cookie choices
- from a colleague, referral partner or organisation that introduces you
- from publicly available professional sources where relevant to a genuine business enquiry
- from third-party platforms when you interact with Natif Studio through their services
How we use personal data
We may use personal data to:
- respond to enquiries and understand what you are trying to achieve
- assess whether Natif Studio is suitable for a proposed project
- prepare proposals, estimates and project recommendations
- arrange meetings and communicate with you
- provide and manage agreed services
- manage contracts, projects, payments and accounts
- maintain appropriate business and project records
- operate, secure and improve the website
- understand how visitors use the website
- manage social media interactions
- send studio news or insights where you have agreed to receive them
- prevent misuse, fraud or security incidents
- establish, exercise or defend legal claims
- comply with legal, accounting and administrative obligations
We do not sell personal data. We do not add you to a marketing mailing list merely because you contacted us about a project.
Our legal bases for processing
Depending on the circumstances, we process personal data because:
- it is necessary to take steps at your request before entering into a contract
- it is necessary to perform a contract with you
- it is necessary to comply with a legal obligation
- you have given your consent
- we have a legitimate interest in operating and protecting the studio, responding to genuine business enquiries, managing professional relationships and improving our services
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, we consider whether our interests are reasonable and whether your rights and interests outweigh them.
Project and client information
When you work with Natif Studio, you may provide content, contact information, website data or other materials needed to complete the project.
We use this information only as reasonably necessary to:
- understand and deliver the agreed work
- communicate with you and relevant project participants
- test, maintain or support the services we provide
- meet contractual, security and legal requirements
Responsibility for ensuring that client-provided information has been collected lawfully remains with the client unless otherwise agreed in writing. Where appropriate, project-specific data protection requirements will be covered by the proposal, contract or a separate data processing agreement.
Cookies and analytics
This website uses cookies and similar technologies for functions such as security, preferences, forms and permitted website analytics. Non-essential cookies are used only in accordance with your choices. See our **Cookie Policy** for more information or select **Cookie Settings** in the website footer to review your preferences.
Who we share information with
Personal data may be shared only where reasonably necessary with:
- people working with or supporting Natif Studio
- trusted contractors or specialist collaborators involved in a project
- website hosting, form, customer relationship management and analytics providers
- email, cloud storage, file-sharing and communication providers
- accounting, payment and administrative service providers
- professional advisers, including accountants, insurers or legal advisers
- public authorities where disclosure is required by law
- a relevant client where an enquiry or project is being managed on that client’s behalf
Service providers are given only the information they reasonably need to perform their role.
Third-party services
Natif Studio uses HubSpot to operate parts of the website, forms and contact management. We may also use trusted third-party services for email, cloud storage, project delivery, analytics, accounting and social media. Third-party websites and platforms operate under their own privacy policies. If you follow a link to Facebook, Instagram or another external service, that provider will be responsible for its own collection and use of personal data.
International data transfers
Some service providers may process or store personal data outside France, the European Economic Area or the United Kingdom. Where required, we use providers that apply recognised safeguards, such as an adequacy decision, approved contractual protections or Standard Contractual Clauses.
How long we keep information
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.
Our general retention periods are:
- Project enquiries and prospective-client information: up to three years after your last meaningful contact with us
- Unsuccessful proposals and estimates: generally up to three years, unless a longer period is necessary for a dispute or legal claim
- Client contracts and commercial correspondence: generally five years after the end of the commercial relationship
- Invoices and accounting records: ten years where required by French law
- Marketing subscriptions: until you unsubscribe, withdraw consent or the information is no longer needed
- Website and cookie information: for the periods described in our Cookie Policy
- Client project data: for the duration of the project and any agreed support period, after which it will be returned, deleted or securely archived as appropriate
Information may be retained for longer where required by law, necessary to resolve a dispute or needed to establish, exercise or defend a legal claim.
Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to people and service providers who reasonably need the information. No website, email system or online storage service can be guaranteed to be completely secure. Please avoid sending confidential or sensitive information through an ordinary website form.
Automated decision-making
We do not use personal data submitted through this website to make decisions about you based solely on automated processing. Any decision about whether Natif Studio can assist with an enquiry or project is reviewed by a person.
Your data protection rights
Depending on the circumstances and applicable law, you may have the right to:
- ask whether we hold personal data about you
- access the personal data we hold
- correct inaccurate or incomplete information
- request deletion of your information
- restrict how your information is used
- object to certain processing
- receive certain information in a portable format
- withdraw consent at any time
- object to direct marketing at any time
These rights are not absolute and may be subject to legal exceptions.
To exercise your rights, email privacy@natif.studio or use our **Data Privacy Request** page.
We may ask for information needed to confirm your identity before completing a request.
Complaints
Please contact us first if you have a concern about how your personal data has been handled. You may also submit a complaint to the CNIL in France or another competent data protection authority in the country where you live or work. People in the United Kingdom may also contact the ICO.
External links