Privacy Policy

This policy explains what personal data we collect, why, and your rights. The data controller is Elias de Sena, trading as Newton Studios, Bützenstrasse 17, 8185 Winkel, Schweiz, reachable at hello@newton-studios.com. We process personal data under the Swiss Federal Act on Data Protection (revFADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. What this covers

This policy covers Newton Studios and everything we run on newton-studios.com and its subdomains:

• The marketing site (newton-studios.com) — public pages and a contact form. No account needed.
• Our booking page — a few qualifying questions and a time slot for an introductory call. It is unlisted and reached by invitation, so it is not linked from this site. No account needed.
• The client portal (clients.newton-studios.com) — for people we already work with. Sign-in by emailed link or Google, and it holds their projects, files, agreements and invoices.
• The payment page (pay.newton-studios.com) — pays a specific invoice by card, TWINT or Swiss bank transfer. Card details go straight to Stripe; we never see or store them.

1a. Google user data — what we ask for and why

Two separate things use Google, and neither reads anything belonging to you beyond what is listed here. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

• Signing in to the client portal (optional — an emailed link does the same job). If you choose Google, we receive your name, email address and profile picture, and we use them for one purpose: to identify which client account you are. We do not read your Google contacts, files or mail, and we do not use this data for advertising.
• Booking an introductory call. This reads and writes our own studio calendar, never yours. It checks which of our times are already busy so the page can offer only free ones, and it creates the confirmed meeting with a Google Meet link and invites you. We only ever see whether our own slots are free or busy — not the contents of any calendar entry, ours or anyone else's.

We do not sell Google user data, we do not transfer it to third parties except the processors listed below that operate the service on our behalf, and we do not use it to train generalised AI models. If you want the Google connection to your portal account removed, email us and we will unlink it; you can also revoke access yourself at myaccount.google.com/permissions.

2. What we collect

• Contact form data: your email address and, if you provide them, your name, company, budget range, and message.
• Technical and usage data: IP address, browser and device information, pages viewed, referrer, and marketing identifiers (such as UTM tags and a click ID) where advertising measurement is enabled.
• Consent choices: whether you allowed or declined advertising cookies (see section 6).

3. Why we use it and our legal basis

• To answer your enquiry when you write to us through the contact form or by email. Basis: taking steps at your request before entering into a contract.
• To run and secure the website (hosting, delivery, rate limiting, spam protection). Basis: legitimate interest.
• To measure the website with Vercel Analytics, which counts page views without cookies or cross-site identifiers. Basis: legitimate interest.
• To measure advertising (the Meta pixel, only where it is configured). Basis: your consentif you are in the EEA, the UK or Switzerland — we ask before anything loads, nothing runs until you allow it, and you can withdraw at any time using the “Cookie choices” control at the bottom of this page. Elsewhere, our legitimate interest in understanding our marketing; a decline recorded via the same control is always honoured.

4. Who we share it with (processors)

We use a small number of providers to run the site. They process data on our behalf under contract:

• Vercel: website hosting, content delivery, and the cookie-less site analytics described above.
• Resend: when the contact form is connected to it, your submission is stored as a contact record and delivered to our inbox as an email.
• Meta Platforms: advertising measurement via the Meta pixel, only where it is configured and, in consent regions, only after you allow it.
• Cloudflare: bot and spam protection on the contact form (Turnstile), where enabled; it receives your visitor IP address.
• Supabase: the database and file storage behind the client portal — projects, files, agreements, invoices and the answers you give the booking page.
• Stripe: card and wallet payments on the payment page. Card details go to Stripe directly and never reach our servers.
• Google: sign-in for the client portal (optional), and the calendar and Meet link for a booked introductory call, as described in section 1a.

We do not sell your personal data.

5. International transfers

Some of these providers are based in the United States (Vercel, Resend, Meta, Cloudflare, Supabase, Stripe, Google). Where data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses.

6. Cookies and similar technologies

This site sets very few cookies, and none until they are needed:

• consent (essential): records your answer to the advertising-cookies question, kept for up to a year so we do not have to ask again.
• consent_required (essential): records whether your region requires us to ask before advertising tools load. It contains a yes/no flag, not your location.
• Advertising: the Meta pixel sets its own identifiers — only where the pixel is configured and, in the EEA, the UK and Switzerland, only after you consent.

The “Cookie choices” control at the bottom of this page (and in the site footer) is the direct route: it clears your stored answer and asks again, so withdrawing consent is as easy as giving it. You can also control or block cookies through your browser settings, or email hello@newton-studios.com to object and we will act on it.

7. How long we keep it

Contact form submissions are kept while we still have a use for them — answering you, and keeping a record of the conversation — and until you ask us to delete them; we do not currently run an automatic purge, so if you want a submission removed, email us and we will delete it. Consent cookies expire on their own within a year.

8. Your rights

Subject to law, you can ask us to:

• access the personal data we hold about you, and get a copy;
• correct data that is wrong or incomplete;
• delete your data;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already done.

To exercise any right, email hello@newton-studios.com. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, your local data protection authority.

9. Security

We take reasonable technical and organisational measures to protect your data, including transport encryption and access controls on the systems that hold contact submissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes

We may update this policy. The current version is the one published here, dated above. Material changes will update that date.

11. Contact

Elias de Sena, trading as Newton Studios, Bützenstrasse 17, 8185 Winkel, Schweiz. Email hello@newton-studios.com.