Legal
Privacy Policy
Your privacy matters to us. This policy explains what personal data Northfin Studio collects, why we collect it, and what rights you have. We comply with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
1. Who we are
Northfin Studio is a design and development studio based in Amsterdam, the Netherlands, operated by Max Fa Si Oen.
Contact: hello@northfin.studio
2. What data we collect
We only collect data necessary to run our business:
• Name, email, and message (via contact form or email)
• Client information (such as company details, if you work with us)
• Technical data (such as IP address and browser data)
We do not collect sensitive personal data or sell your information.
3. How we use your data
We use your data to:
• Respond to your message
• Communicate about potential or ongoing work
• Deliver services and manage client relationships
• Comply with legal obligations (such as invoicing)
We do not use your data for marketing without your consent.
4. Legal basis
We process your data based on:
• Legitimate interest (communication and business operations)
• Contract necessity (when working with clients)
• Legal obligations (such as tax and accounting requirements)
• Consent (where applicable, such as cookies)
5. Data retention
We retain personal data only as long as necessary:
• General inquiries: up to 2 years
• Client and financial records: up to 7 years (as required by law)
We delete data when it is no longer needed.
6. Cookies
We use essential cookies to ensure the website functions properly.
We do not use analytics or tracking cookies without your consent.
7. Third-party services
We use trusted service providers to operate our business, such as hosting, email, and (in the future) invoicing or project tools.
These providers may process technical or personal data on our behalf.
Our website is hosted on Vercel, which may process technical data such as IP addresses.
8. International transfers
Some service providers may process data outside the European Economic Area (EEA).
Where this occurs, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.
9. Your rights
You have the right to access, correct, or delete your personal data, as well as to object to or restrict processing.
To make a request, contact us at hello@northfin.studio.
You also have the right to file a complaint with the Dutch Data Protection Authority.
10. Updates
We may update this policy from time to time. The latest version will always be available on this page.