Privacy policy

01 / Who we are

nuji studio is an independent creative and digital studio based in Stockholm, Sweden.

This website is operated by Cofrinho AB under the name nuji studio.

For questions about privacy or personal data, you can contact the studio using the email address above.

02 / Information we collect

What the site collects depends on how you use it.

Contact form. Name and email address are required. Website, phone number and message are optional. Submitting the form acknowledges the Privacy Policy. That acknowledgement is not consent to analytics or advertising.

The form also includes the page you sent it from, the service category for that page, and the time of submission.

Technical information. Delivering the site and protecting the contact form can involve an IP address and other connection data, such as the time of a request. The contact form uses an IP-based identifier for rate limiting. If you allow analytics, Google Analytics 4 can receive the page address and general device information for that visit. It does not run until you allow it, and it does not run in local development or on preview deployments. Advertising tools are not used.

03 / How we use your information

Personal information is used for these purposes.

Inquiries. To receive a message, reply, and carry on the correspondence that follows.

Proposals. To prepare a proposal or discuss a possible project when that is what the inquiry asks for.

The website. To keep the site available and to limit spam and abuse of the contact form.

Analytics. If you allow analytics cookies, Google Analytics 4 records page views on the published website. It does not run before that choice, and it stops if you withdraw the choice. Advertising measurement is not used.

04 / Legal basis for processing

The GDPR applies to this processing. Which basis applies depends on the activity.

Legitimate interests. Responding to a business inquiry, keeping the website secure, and limiting spam and abuse, where those interests are not overridden by your rights.

Steps before a contract. Preparing a proposal or otherwise taking steps you ask for before any agreement exists.

Legal obligation. Keeping a record where the law requires it. This policy does not treat an inquiry email as an accounting record unless that obligation actually applies.

Consent. Google Analytics 4 relies on your analytics choice. It runs only after you allow analytics, and only on the published website. Marketing consent does not turn on advertising. The form acknowledgement is not analytics consent.

You can withdraw analytics consent in Cookie settings. Withdrawal stops further analytics measurement and does not affect processing that was lawful before you withdrew it.

05 / Contact forms and communication

A submitted inquiry is sent by email through Resend and received at hello@nuji.studio in Google Workspace. The sending address is forms@nuji.studio.

The website does not store submitted inquiries in its own database. The copy of an inquiry is the email.

The message is used to reply and, where relevant, to prepare a proposal or continue the conversation. Sending the form does not add you to a newsletter or a marketing list.

Please avoid including sensitive personal information unless the inquiry actually needs it.

06 / Visual presentation

The published site uses motion, animated backgrounds and other visual presentation.

Those features run in the browser to show the work. They do not collect a profile, generate recommendations, or send selections to the studio.

07 / Cookies and similar technologies

Google Analytics 4 may set cookies such as _ga after you allow analytics on the published website. Those cookies are not set before that choice. Advertising cookies are not used.

Your choice about optional analytics and marketing is stored in the browser’s local storage. That preference has no automatic expiry. It stays until you change it or clear the site’s stored data.

Analytics and marketing are separate choices. Both stay off unless you allow them. Allowing analytics loads Google Analytics 4 on the published website only. Allowing marketing does not load an advertising tool. Withdrawing analytics removes the analytics script and deletes the Google Analytics cookies stored for this site.

Fonts are included with the website. Pages do not request fonts from Google Fonts.

08 / Cookie management and consent

You can accept or reject optional analytics and marketing, or change that choice later, through Cookie settings in the footer.

Rejecting analytics, or turning it off later, stops further page measurement and deletes the Google Analytics cookies stored for this site. Marketing does not start an advertising tool.

You can also clear site data in your browser. That removes the stored preference.

09 / Cookies and services used

These are the services that handle personal information for this website today.

Upstash Redis limits the contact form to 5 submissions in 10 minutes for each IP address. That identifier is used for security and spam prevention. It is not a cookie placed in your browser.

Vercel hosts the website and runs the contact form. It processes requests and technical connection data so the site can be delivered. Vercel Analytics and Speed Insights are not in use. Hosting is not the same thing as visitor analytics.

10 / Third-party services

Cofrinho AB uses these providers for the roles described above.

• Vercel, for hosting and serverless functions.
• Resend, for sending inquiry emails.
• Google Workspace, for receiving and storing those emails and other business correspondence.
• Upstash, for contact form rate limiting.
• Google Analytics 4, for page measurement on the published website, only after analytics consent.

Each provider processes the information needed for that role. Google Analytics 4 is the only optional analytics tool, and it loads only after analytics consent on the production website. Microsoft Clarity, Meta Pixel, Google Ads, Google Tag Manager and Google Fonts are not active.

11 / International data transfers

Vercel, Resend, Upstash and Google, including Google Analytics 4 when analytics is allowed, may process personal information outside Sweden. Whether a particular service stores it outside the European Economic Area, and which safeguard applies, is not recorded in this website.

Those details have to be confirmed from each provider’s current terms and from the studio’s agreements with them. They can be requested at hello@nuji.studio. This policy does not state a country, an adequacy decision or a contract type that has not been confirmed.

12 / How long we keep information

Inquiry emails are kept for as long as reasonably necessary to handle the inquiry, follow up, and meet an obligation that actually applies. They are not deleted automatically after a fixed number of days. This policy does not set that period.

The rate limit counts submissions over a 10-minute window. Other technical logs, including any logs kept by the host, are not given a retention period in this website. When analytics is allowed, Google keeps that measurement data under its own retention settings. This website does not copy that data into its own database.

If an inquiry later becomes a client project, records from that work are a separate matter. They are kept where the project agreement or the law requires it, not in the website’s database.

13 / Data security

Reasonable technical and organizational measures are used to protect personal information against unauthorized access, alteration, disclosure and loss.

These measures may include access restrictions, encrypted connections, secure hosting and appropriate security practices.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

14 / Your rights

Under the GDPR, you have certain rights regarding your personal information.

Depending on the circumstances, these may include the right to:

• Access the personal data held about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Request restriction of certain processing activities.
• Object to processing based on legitimate interests.
• Receive your personal data in a portable format where applicable.
• Withdraw consent where processing is based on consent.

Some rights are subject to legal conditions and exceptions.

To exercise your rights, contact hello@nuji.studio.

Requests will be handled in accordance with applicable data protection law.

15 / Complaints

If you have concerns about how your personal information is handled, you are welcome to contact the studio.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent supervisory authority.

16 / External websites

This website may contain links to external websites and third-party services.

nuji studio is not responsible for the privacy practices or content of external websites.

We recommend reviewing their respective privacy policies before providing personal information.

17 / Children’s privacy

This website is intended primarily for businesses, professionals and individuals interested in creative and digital services.

It is not specifically directed at children, and the studio does not knowingly seek to collect personal information from children through the website.

If you believe that a child has submitted personal information, please contact the studio so the situation can be reviewed and appropriate action taken.

18 / Changes to this policy

This Privacy Policy may be updated to reflect changes in the website, its services, data processing practices or applicable legal requirements.

The latest version will be published on this page with an updated revision date.

Where required by law, additional notice or renewed consent will be provided.

19 / Contact

For questions about this Privacy Policy, cookies or the processing of personal data, please contact:

nuji studio, operated by Cofrinho AB, registration number 559558-0860, Stockholm, Sweden.

Email: hello@nuji.studio. Website: nuji.studio.