Privacy policy.

This privacy policy explains how Naëlya Creative Studio collects and processes personal data when you visit naelya.studio or get in touch with us. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

Tiphaine Molinario, Naëlya Creative Studio, Glärnischstrasse 38, 8712 Stäfa, Switzerland. For any question about your data: hello@naelya.studio

2. Data we collect

• Contact form: full name, company, country, email address, phone number, project type and your message.
• Email and WhatsApp exchanges: the information you choose to share with us.
• Technical data: when you visit the website, our host automatically records server logs (IP address, date and time of access, pages viewed, browser and operating system). We do not use them to identify you.

3. Why we use your data

We process your data to answer your enquiry, prepare a quote and carry out a project with you, to keep the website secure and working properly, and to meet our legal obligations, notably in accounting. Under the GDPR, the legal bases are pre-contractual steps and the performance of a contract (Art. 6(1)(b)), our legitimate interest in running a secure website (Art. 6(1)(f)) and our legal obligations (Art. 6(1)(c)). We never sell your data or use it for advertising.

4. Who receives your data

Your data is shared only with the service providers we need to run the studio, and only as far as necessary:

• Infomaniak Network SA (Switzerland): hosting of the website, the contact form and our email.
• Meta Platforms (WhatsApp, Instagram): only if you contact us through these services or click on their icons; their own privacy policies then apply.
• Our accountant and the authorities, where required by law.

5. Data transfers abroad

Our website, contact form and email are hosted in Switzerland. Data is only processed abroad if you choose to contact us through WhatsApp or Instagram (Meta Platforms, which may process data in the European Union or the United States). Such transfers rely on appropriate safeguards, such as the European Commission’s standard contractual clauses or the Swiss-US Data Privacy Framework.

6. How long we keep your data

Enquiries that do not lead to a project are deleted no later than 24 months after our last exchange. Data relating to a contract and its invoicing is kept for 10 years, as required by Swiss law. Server logs are kept briefly by our host for security purposes.

7. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including an encrypted (HTTPS) connection.

8. Your rights

You may at any time ask to access your data, have it corrected or deleted, object to its processing or receive it in a commonly used format, subject to our legal obligations. Simply write to hello@naelya.studio and we will reply within 30 days. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, with the data protection authority of your country.

9. Cookies

Information about the cookies used on this website is available in our cookie policy.

10. Changes

We may update this privacy policy at any time. The version published on this website applies.

Last updated: 13 November 2026