Privacy Policy
How we collect, use and protect your personal data.
Who We Are
Serene Studio is a digital design brand operated by an individual creator based in the Netherlands. We are the data controller responsible for your personal data collected through this website. Contact: contact@serenestudio.nl — serenestudio.nl.
What Data We Collect
We collect the following personal data when you interact with Serene Studio. When you make a purchase: your name, email address, billing address, and payment information. Payment details are processed securely by our payment provider and are never stored on our servers. When you sign up for email notifications: your email address only. When you contact us: your name, email address, and the content of your message. When you visit our website: standard technical data including your IP address, browser type, device type, pages visited, and time spent on the site. This data is collected through analytics tools and cookies.
Why We Collect Your Data
We collect and use your personal data for the following purposes. To process and fulfil your order — including sending your download link and order confirmation — based on the legal basis of contractual necessity under Article 6(1)(b) GDPR. To send you email notifications about new collections when you have opted in — based on your consent under Article 6(1)(a) GDPR. You can withdraw this consent at any time by clicking unsubscribe in any email. To respond to your enquiries and provide customer support — based on our legitimate interest under Article 6(1)(f) GDPR. To analyse website usage and improve the site experience — based on our legitimate interest under Article 6(1)(f) GDPR.
Who We Share Your Data With
We do not sell your personal data to any third party. We share your data only with the following service providers who help us operate the site and fulfil orders. Payment processor — to handle transactions securely. Email service provider — to send order confirmations and notification emails. Website hosting and analytics provider — to operate and maintain the website. All third-party providers are required to handle your data in compliance with GDPR and are only permitted to use your data for the specific purpose for which it was shared.
How Long We Keep Your Data
Order data including your name, email and purchase history is retained for 7 years to comply with Dutch tax and accounting obligations under the Algemene wet inzake rijksbelastingen. Email notification subscribers are retained until you unsubscribe or request deletion. Website analytics data is retained for 26 months. Contact enquiry data is retained for 2 years.
Your Rights Under GDPR
As a resident of the EU or EEA you have the following rights regarding your personal data. The right to access — you can request a copy of the personal data we hold about you. The right to rectification — you can ask us to correct any inaccurate or incomplete data. The right to erasure — you can ask us to delete your personal data where there is no legal reason to retain it. The right to restrict processing — you can ask us to pause processing of your data in certain circumstances. The right to data portability — you can request your data in a structured, machine-readable format. The right to object — you can object to processing based on legitimate interest, including direct marketing. The right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact us at contact@serenestudio.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
Cookies
Our website uses cookies to operate correctly and to understand how visitors use the site. Essential cookies are required for the site to function and cannot be disabled. Analytics cookies collect anonymised data about site usage to help us improve the experience — these are only placed with your consent. We do not use advertising or tracking cookies. You can manage your cookie preferences at any time through your browser settings.
Data Security
We take the security of your personal data seriously. All data is transmitted over encrypted HTTPS connections. Payment data is handled exclusively by our PCI-compliant payment processor and is never stored on our servers. We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours and inform affected individuals without undue delay.
International Data Transfers
Some of our service providers may be based outside the European Economic Area. Where this is the case, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your data in accordance with GDPR.
Children's Privacy
Serene Studio is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at contact@serenestudio.nl and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available at serenestudio.nl/privacy. We will notify you of any significant changes by email if you are a subscriber.
Contact
For any privacy-related questions or to exercise your rights: contact@serenestudio.nl — serenestudio.nl — Serene Studio, Netherlands — Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl
Last updated: May 2026