Privacy Policy

Who we are

Artzmen Creative is a creative studio based in Helsinki, Finland. We run this website and we decide how the personal data collected on it is used, which makes us the data controller. For anything in this policy, write to connect@artzmencreative.com.

What we collect, and why

We collect as little as the site needs to work, and nothing in secret.

• The newsletter. If you subscribe, we store your email address, the language you subscribed in, the exact consent text you agreed to, and the time you agreed. We use this to send you the newsletter you asked for, and for nothing else. The legal basis is your consent, which you give by ticking the box, and which you can withdraw at any time.
• Messages and project inquiries. If you contact us or fill in the project brief, we store what you send us: typically your name, email address, company, role, and what you tell us about your project. We use it to reply and to prepare the work you asked about. The legal basis is taking steps at your request before entering into a contract.
• Advertising lead forms. Some of our Facebook and Instagram ads open a short form inside the app. If you fill it in, Meta passes your answers to us: typically your name, email address, phone number if you give it, company, and what you tell us about your project, budget and timing. We use them to reply and to prepare the work you asked about, exactly as with a message sent from this site. The legal basis is taking steps at your request before entering into a contract. We may mark whether an inquiry was a good fit, and Meta can use that mark to show our ads to people more likely to be one. Your use of Facebook and Instagram themselves is covered by Meta's own privacy policy.
• The website itself. The site remembers your light or dark theme choice in your own browser, and that preference never leaves your device. Our host, Vercel, counts page views and measures how fast pages load for real visitors; it stores nothing on your device and cannot identify you. In the same way, without a cookie, the site notes how our Let's chat form is used: which button opened it, which steps and choices were made and where it was closed. Vercel counts that, and our team gets a short notice of it in Slack. Nothing you write in the form is part of it; what you write reaches us only when you send the form. Beyond that, nothing measures you unless you allow it: the consent banner decides whether Google Analytics and the Meta pixel run at all, and the cookie policy lists everything they set.

Cookies and similar tools

The site asks before it uses any cookie to measure you. A consent banner appears on your first visit and nothing beyond the strictly necessary runs until you answer it. If you accept statistics we use Google Analytics to see which pages people read; if you accept marketing we use the Meta pixel so the ads we run on Instagram and Facebook reach the right people. Decline either and it simply never loads, and the site works exactly the same. You can change your answer at any time from the cookie settings link in the footer, and the full list of cookies is on our cookie policy page. One cookie is set whatever you choose: a first-party record of your own answer, named az-consent, which is what allows us to honour it on later visits and on our own server.

Who processes data for us

A few carefully chosen services handle data on our behalf, under data processing agreements, and only on our instructions:

• Vercel hosts the website and handles the traffic that serving a page requires.
• Resend delivers our email and holds the newsletter lists.
• Slack notifies our small team internally when a message or a lead form answer arrives.
• Attio holds our client records, so a project inquiry reaches the right person and is not lost in an inbox.
• Google Sheets holds the answers from our advertising lead forms in a private spreadsheet that only our team can open, so each one is seen and answered. Google is in the United States and certified under the EU-US Data Privacy Framework.
• Calendly runs the booking calendar, and only for people we have offered a call to after they sent us a brief. Its script loads at that point and not before, so a visitor who is never offered a call never meets it. Calendly is in the United States and certified under the EU-US Data Privacy Framework.
• Mux streams the project reels and video testimonials when you press play on one, and sends nothing until you do. Mux, Inc. is in the United States and certified under the EU-US Data Privacy Framework.
• The consent banner is the Silktide consent manager, which we serve from our own domain rather than loading from a vendor. It records what you agreed to in your own browser. No third party sees your visit in order to ask you the question.
• Google Analytics tells us which pages are read and how people arrive, but only if you accept statistics cookies.
• Meta receives the pixel signal that lets us measure and target our Instagram and Facebook advertising, but only if you accept marketing cookies. Meta also runs the lead forms inside Facebook and Instagram and passes the answers to us.

Some of these providers are based in the United States. Where data leaves the European Economic Area, the transfer relies on the EU and US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

Newsletter data is kept until you unsubscribe, after which your address is removed from the list. Inquiry and project correspondence, including answers from our advertising lead forms, is kept for as long as we work together or reasonably might, and reviewed after two years. Consent records are kept for as long as the law expects us to be able to show them.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, restrict or object to how we use it, and take your data with you. Write to connect@artzmencreative.com and we will answer within a month. You can also complain to a supervisory authority; in Finland that is the Office of the Data Protection Ombudsman, tietosuoja.fi.

What we never do

We do not sell personal data. We do not buy audiences. We do not profile you. The newsletter goes out only when we have something to say, and every letter tells you how to leave.

Children

The site and the newsletter are meant for professionals and are not directed at children.

Changes

If this policy changes, the new version appears here with a new effective date. If a change matters to something you have already agreed to, we will tell you before it applies.

Contact

Artzmen Creative, Helsinki, Finland. connect@artzmencreative.com.