Menu

Privacy Policy

Last updated: 7 August 2026

This is a courtesy translation. The French version is the legally binding text.

1. Introduction

Nova Studio, a collective of freelancers made up of Yann Mostowski and Mathieu Dubust (hereafter "we"), is committed to protecting the privacy of users of its website novastudio.agency (hereafter "the Site").

This privacy policy describes the types of personal data we collect, the purposes for which they are processed, and your rights under the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Data controllers

The joint data controllers are:

Yann Mostowski

Sole trader (micro-entrepreneur)

Paris, France

Mathieu Dubust

Sole trader (micro-entrepreneur)

Paris, France

Contact: contact@novastudio.agency

3. Data collected

We collect the following data when you use the Site:

Contact form / Booking (Cal.com)

  • First and last name
  • Email address
  • Phone number (if provided)
  • Message and project description

Browsing data (collected automatically)

  • IP address (anonymised)
  • Browser type and version
  • Pages viewed and time spent
  • Traffic source (referrer)

Audience measurement (Microsoft Clarity)

  • Clicks, scrolling and mouse movement
  • Session replay and aggregated heatmaps
  • Device type, browser and screen resolution
  • Approximate location derived from the IP address

4. Purposes of processing

Your data is processed for the following purposes:

  • Answering your enquiries and quote requests
  • Scheduling and managing appointments through Cal.com
  • Replying to messages received via WhatsApp
  • Improving the usability and user experience of the Site
  • Producing aggregated traffic and usage statistics
  • Meeting our legal and regulatory obligations

5. Legal basis for processing

Under the GDPR, the processing of your data relies on:

  • Your consent: when you contact us through the form or book an appointment
  • Legitimate interest: for anonymised statistical analysis and improving the Site
  • Performance of a contract: for managing the commercial relationship

6. Retention periods

Your personal data is retained for the following periods:

  • Contact data: 3 years from the last exchange
  • Browsing data: 13 months maximum
  • Contractual data: duration of the commercial relationship plus 5 years (legal obligations)

7. Data recipients

Your data may be shared with the following processors, strictly within the purposes described above:

  • Vercel Inc. (United States): hosting of the Site
  • Cal.com Inc.: online appointment management
  • Microsoft Corporation (United States): audience measurement and usage analysis through Microsoft Clarity
  • Meta Platforms Ireland Ltd.: message delivery if you contact us via WhatsApp

These processors undertake to comply with the GDPR. Data transfers outside the European Union are governed by standard contractual clauses or adequacy decisions of the European Commission.

8. Cookies

The Site uses cookies strictly necessary for it to work (light or dark theme preference). Under current regulations, these cookies do not require your consent.

The Site also uses Microsoft Clarity, an audience measurement tool that sets third-party cookies (_clck, _clsk). It lets us understand how the Site is used (pages viewed, clicks, scrolling, session replay and heatmaps), for the sole purpose of improving usability.

No advertising or retargeting cookies are used on the Site, and your data is never sold or rented to third parties.

You can opt out of this audience measurement by blocking third-party cookies in your browser settings, or through the privacy settings of your Microsoft account.

9. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

  • Right of access: confirm that your data is processed and receive a copy
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data
  • Right to restriction: limit the processing of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at contact@novastudio.agency. We undertake to reply within one month.

10. Data security

We put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. The Site uses HTTPS to secure data exchanges.

11. Complaints

If you consider that the processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL).

CNIL

3 Place de Fontenoy, TSA 80715

75334 Paris Cedex 07, France

Website: www.cnil.fr

12. Changes

We reserve the right to amend this privacy policy at any time. Any change will be published on this page along with an update date. We encourage you to check this page regularly.