Privacy & Cookie Policy

Last updated: October 17, 2026

1. Who we are

This website (holystudio.co) is operated by Holy Studio, a brand and packaging design studio with offices in Brazil and Italy.

Holy Studio is the data controller for the personal data described in this policy. For any privacy request, contact us at hi@holystudio.co.

2. Data we collect

We collect only what is necessary to run this website and reply to you:

• Information you send us: when you email us or apply to a position, we receive your name, email address, and any other information you choose to share (such as a portfolio or CV).
• Technical data: like any website, our hosting provider automatically processes your IP address, browser type, device information, and pages visited, for security and to deliver the site.

We do not sell your personal data and we do not use it for automated decision making or profiling.

3. Why we use your data and legal basis

4. Cookies and similar technologies

Cookies are small files stored on your device. This website currently uses only strictly necessary cookies and local storage, required for basic functions such as remembering your language preference and keeping the site secure. These do not require consent and cannot be disabled without affecting how the site works.

We do not use analytics, advertising, or tracking cookies. If this changes, we will update this policy and ask for your consent before setting any non-essential cookie.

You can block or delete cookies at any time in your browser settings.

5. Third-party services

To deliver this website, we rely on providers that may process technical data (such as your IP address) on our behalf:

• Ycode (website hosting and content management)
• Supabase (image and file storage)
• cdnjs / unpkg (delivery of website scripts)

Links to external platforms (Instagram, LinkedIn, Behance) take you to services governed by their own privacy policies.

6. International transfers

Some providers may process data outside Brazil or the European Economic Area. When this happens, we rely on appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, as required by the GDPR and the LGPD.

7. How long we keep your data

• Messages and project inquiries: up to [5] years after our last contact, or longer if required for an ongoing business relationship or legal obligation.
• Job applications: up to [12] months, unless you ask us to delete them earlier.
• Technical logs: kept by our providers for limited periods, according to their own policies.

8. Your rights

Under the GDPR (EU) and the LGPD (Brazil), you may:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion or anonymization;
• object to or restrict certain processing;
• request data portability;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email hi@holystudio.co. We will reply within the deadlines set by applicable law. You also have the right to lodge a complaint with a data protection authority: the Garante per la protezione dei dati personali (Italy) or the ANPD (Brazil).

9. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission over the internet is completely secure, but we work to protect your information.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date of the last update shown at the top.

11. Contact

Holy Studio
hi@holystudio.co