Privacy Policy
Privacy Policy
Last updated: 2 August 2026
Studio Baobab respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, contact us or enquire about our services.
It also explains your privacy rights and how to contact us if you have any questions or concerns.
1. Who we are
Studio Baobab is a design and branding studio specialising in places, property and the built environment.
The data controller responsible for your personal data is:
Studio Baobab SL
Calle Jalón, 14
29004 Málaga
Spain
Email: hello@studiobaobab.com
This Privacy Policy applies under the EU General Data Protection Regulation and, where applicable, the UK General Data Protection Regulation and the UK Data Protection Act 2018.
2. Personal data we collect
Information you provide
When you contact us through our website, we may collect:
- your name;
- your organisation;
- your email address; and
- any other information you choose to provide as part of your enquiry.
The website’s contact form sends this information to Studio Baobab by email. Contact form submissions are not stored in the website’s WordPress database.
Enquiry information may subsequently be stored in our private customer relationship management system where this is necessary to assess, manage or respond to a potential project or client relationship.
Please avoid providing sensitive personal information unless it is strictly necessary for your enquiry.
Information collected automatically
When you visit the website, we may collect technical and usage information through cookies and similar technologies, including:
- your IP address;
- browser and device type;
- operating system;
- approximate geographical location;
- pages visited;
- time spent on the website;
- referring website or source; and
- interactions with the website.
3. How we use your personal data
We may use your personal data for the following purposes.
Responding to enquiries
We use the information you provide to respond to your enquiry, discuss potential work, understand your requirements and prepare proposals.
Our lawful basis is taking steps at your request before entering into a contract and our legitimate interest in responding to business enquiries and developing our services.
Providing our services
Where an enquiry develops into a client relationship, we may use your information to:
- communicate with you;
- prepare and manage proposals and contracts;
- deliver our services;
- administer projects and payments; and
- maintain appropriate business records.
Our lawful bases may include the performance of a contract, compliance with legal obligations and our legitimate interests in managing Studio Baobab’s business and client relationships.
Operating and protecting the website
We may process technical information to operate and maintain the website, identify technical problems, prevent misuse and protect our systems.
Our lawful basis is our legitimate interest in maintaining a secure and functional website.
Understanding website use
With your consent, we use Google Analytics 4 to understand how visitors find and use the website, measure its performance and improve its content, navigation and user experience.
You may withdraw or change your consent at any time through the cookie settings available on the website.
Complying with legal obligations
We may process or retain personal information where necessary to comply with tax, accounting, regulatory or other legal requirements, or to establish, exercise or defend legal claims.
4. Cookies and Google Analytics
The website uses cookies and similar technologies.
Cookies are small files placed on your device when you visit a website. We use the following categories of cookies:
- Strictly necessary cookies, which are required for the website to operate or to remember your privacy preferences.
- Analytics cookies, which help us understand how visitors use the website and assess its performance.
We use Google Analytics 4, a website analytics service provided by Google. Google Analytics may collect information such as browser and device details, approximate location, pages visited and interactions with the website.
Google Analytics and other non-essential technologies will not be activated unless you provide consent through our cookie banner.
You can accept, reject or change your cookie choices at any time through the cookie settings control available on the website. You can also restrict or delete cookies through your browser settings.
5. Who we share your information with
We do not sell your personal information.
We may share limited personal data with trusted service providers where necessary to operate the website and our business, including:
- Hostinger, as our website hosting provider;
- Google, as our website analytics provider;
- email and cloud-storage service providers;
- accountants, legal advisers and other professional advisers; and
- regulators, public authorities or law-enforcement bodies where required by law.
These organisations may act as data processors or as independent data controllers, depending on the service they provide and the circumstances.
Where a provider processes personal information on our behalf, it must only process that information for the agreed purposes and must apply appropriate security measures.
6. International data transfers
Some of our service providers may process or store personal information outside Spain, the European Economic Area or the United Kingdom.
Where personal data is transferred internationally, we use appropriate safeguards as required by applicable data protection law. These may include:
- an applicable adequacy decision;
- approved standard contractual clauses;
- the UK International Data Transfer Agreement or UK Addendum, where applicable; or
- another legally recognised transfer mechanism.
You may contact us for further information about the safeguards relevant to your personal data.
7. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet applicable legal, accounting and reporting obligations.
As a general rule:
- enquiries that do not result in a client relationship are retained in our email system or private CRM for up to 12 months after the last communication;
- client and project information is retained for the duration of the professional relationship and afterwards for as long as required by applicable tax, accounting and legal obligations;
- Google Analytics event-level data is retained for up to 14 months;
- cookie consent preferences are retained for the period configured through our cookie consent system; and
- records relating to privacy requests or complaints may be retained where necessary to document how the matter was handled.
When personal information is no longer required, we delete it, anonymise it or securely dispose of it.
8. How we protect your information
We use appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
Access to personal information is limited to people and service providers who need it for legitimate business purposes.
However, no website, email service or internet transmission can be guaranteed to be completely secure.
9. Your data protection rights
Depending on your location and the circumstances, you may have the right to:
- request access to the personal information we hold about you;
- request the correction of inaccurate or incomplete information;
- request the deletion of your information;
- request that we restrict how your information is used;
- object to processing based on legitimate interests;
- receive certain information in a structured, commonly used and machine-readable format;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a data protection authority.
These rights are not absolute and may be subject to legal limitations or exceptions.
To exercise any of these rights, contact us at hello@studiobaobab.com. We may ask for information necessary to verify your identity before responding.
10. Complaints
If you have a question or complaint about how Studio Baobab uses your personal information, please contact:
We will review your concerns and respond without undue delay.
You also have the right to complain to the relevant data protection authority.
For matters relating to Spain or the European Union, you may contact the Agencia Española de Protección de Datos, or the supervisory authority in the EU or EEA country where you live, work or believe an infringement has taken place.
For matters relating to the United Kingdom, you may contact the Information Commissioner’s Office.
We would appreciate the opportunity to address your concerns directly before you contact a supervisory authority.
11. Children’s information
Our website and services are intended for businesses and adult users.
We do not knowingly collect personal information from children through the website. If you believe that a child has provided us with personal information, please contact us so that we can review and, where appropriate, delete it.
12. Third-party websites
The website may contain links to websites operated by third parties.
Studio Baobab is not responsible for the privacy, security or content of third-party websites. We recommend reviewing their privacy policies before providing them with personal information.
13. Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our website, services, technologies or legal obligations.
The latest version will be published on this page, together with the date on which it was last updated.
14. Contact us
For questions about this Privacy Policy or how Studio Baobab handles personal information, contact:
Studio Baobab SL
Calle Jalón, 14
29004 Málaga
Spain