Privacy
Policy.

01

Introduction

Number 8. Studio ("we", "us", "our") is committed to protecting the privacy of all individuals who interact with our website located at number8.studio (the "Site"). This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable law, including the General Data Protection Regulation (GDPR — Regulation EU 2016/679).

By using our Site or submitting a project inquiry, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our Site.

02

Data we collect

We may collect the following categories of personal data when you use our Site or contact us:

• Identity data: first name, last name, company name
• Contact data: email address, phone number
• Project data: information you voluntarily provide in project inquiry forms (service type, budget, timeline, project description)
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and platform
• Usage data: information about how you use our Site (pages visited, time spent, referring URLs)
• Communication data: any correspondence you send us via email or contact forms

We do not knowingly collect data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us immediately.

03

How we use your data

We use the personal data we collect for the following purposes, each grounded in a lawful legal basis under GDPR:

• To respond to project inquiries — processing necessary for the performance of a pre-contractual relationship (Art. 6.1.b GDPR)
• To send you a project proposal or quote — legitimate interest in managing business relationships
• To improve our Site — legitimate interest in optimizing user experience and technical performance
• To comply with legal obligations — compliance with applicable French and European law (Art. 6.1.c GDPR)
• To send occasional news or updates — only with your explicit prior consent (Art. 6.1.a GDPR), with easy opt-out at any time

We will never use your data for automated decision-making or profiling that produces legal or similarly significant effects.

04

Cookies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience and analyze traffic.

• Essential cookies: strictly necessary for the Site to function correctly — no consent required
• Analytics cookies: help us understand how visitors interact with the Site (e.g. Google Analytics) — require your consent
• Preference cookies: remember your settings and choices — require your consent

You can manage or withdraw your cookie consent at any time via your browser settings or the cookie banner displayed on your first visit. Disabling non-essential cookies will not affect the core functionality of the Site.

05

Data sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers: trusted third-party tools that help us operate the Site (e.g. hosting provider, email delivery service) — bound by data processing agreements
• Legal compliance: if required by law, regulation, or court order
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred — you will be notified in advance

Any third party with whom we share data is contractually required to handle it securely and in accordance with GDPR.

06

Data retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Project inquiry data: up to 3 years from last contact, unless a contractual relationship is established
• Client data: up to 10 years following the end of the contractual relationship, as required by French commercial law
• Analytics data: anonymized after 26 months
• Cookie data: maximum 13 months from consent

Once data is no longer required, we securely delete or anonymize it.

07

Your rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your data ("right to be forgotten") where no legitimate ground exists for retaining it
• Right to restriction: request that we limit the processing of your data under certain circumstances
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at the address below. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority, the CNIL.

08

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted via the Site
• Access controls limiting who can access personal data internally
• Regular security reviews and updates
• Secure deletion procedures when data is no longer needed

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

09

Contact

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to report a concern, please contact us:

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.