WhatsApp
Chat on WhatsApp
Privacy

Privacy Policy

Last updated: 28 September 2026

This policy explains what personal data RJL Studio collects through www.rjl.studio, why we use it, who we share it with and what rights you have. We aim to follow the EU General Data Protection Regulation (GDPR) and apply the same standard to all visitors, wherever they are.

1. Who we are

The data controller is Oleg Rijikov, trading as RJL Studio, a web design and development studio working with clients internationally, with locations in Paphos, Cyprus and Cascais, Portugal. For any privacy question or request, email us: oleg@rjl.studio

2. What data we collect

Data you give us

  • Contact form: name, email address, phone number, company and your message.
  • Free website check form: the same details plus the URL of the website you want us to review.
  • Emails and WhatsApp messages: whatever you choose to send us.

Data collected automatically

When you visit the site, your browser sends technical data such as your IP address, browser type and the pages requested. This data is processed by our hosting provider and by the services that load fonts and spam protection, as described in section 7. We do not use analytics or advertising tools on this site.

3. Why we use your data and on what legal basis

  • To reply to your enquiry, carry out the free website check, prepare a proposal and discuss a possible project. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • To run the site securely and protect our forms from spam and abuse. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
  • To keep records of our communication and follow up on an enquiry you sent. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • To send you anything beyond a reply to your request, such as news or offers, only if you have agreed. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • To meet legal obligations, such as tax and accounting rules, once we work together.

You do not have to give us your data, but without contact details we cannot reply to you.

4. Who we share data with

We do not sell personal data. We share it only with service providers that help us run the site and the business, and only as needed:

  • Webflow, Inc.: website hosting and form submissions.
  • Google: Google Fonts (your IP address is sent to Google when fonts load) and Google reCAPTCHA (spam protection on forms).
  • Meta (WhatsApp): only if you choose to contact us through the WhatsApp button.
  • Our email provider: for sending and receiving email.

We may also disclose data when required by law or to protect our legal rights.

5. International transfers

Some of these providers, including Webflow and Google, are based in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

6. How long we keep data

  • Enquiries and form submissions: up to 24 months, unless they lead to a contract.
  • Client and contract records: for as long as tax and accounting law requires.

After that we delete or anonymise the data.

7. Cookies

We do not use analytics, advertising pixels or marketing cookies on this site. Webflow may set cookies that are strictly necessary for the site and its forms to work, and Google reCAPTCHA may process technical data to tell people from bots. These do not require consent. If we add analytics or other optional tools in the future, we will ask for your consent first and update this policy.

8. Your rights

You have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict how we process your data;
  • receive your data in a portable format;
  • object to processing based on legitimate interest;
  • withdraw your consent at any time, without affecting earlier processing.

To use any of these rights, email us. We may ask you to confirm your identity and will reply within one month: oleg@rjl.studio

You also have the right to complain to a data protection supervisory authority, for example the one in the country where you live or work. In Cyprus this is the Commissioner for Personal Data Protection; in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).

9. Security

We use reasonable technical and organisational measures to protect your data and limit access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

Our services are for businesses and adults. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy, for example when we add a new tool to the site or the law changes. The current version is always on this page, with the date of the last update at the top.