BCN Studio

Privacy Policy

Last updated: August 2026

This Privacy Policy ("Policy") describes how BCN Studio ("BCN Studio", "we", "us", "our"), a next-generation digital studio building what's next, collects, uses, discloses, and protects personal information in connection with our website, services, and customer engagements. This Policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Digital Personal Data Protection (DPDP) Act 2023, and other applicable data protection laws as of August 2026.

By using our website or services, you acknowledge and accept the collection and use of your information as described in this Policy. If you do not agree, please do not use our services.

1. Information We Collect

We may collect the following types of information:

1.1 Information You Provide

  • Contact Details: Name, email address, phone number, company name, and postal address provided via contact forms, project inquiries, or agreements.
  • Payment Information: Billing details, bank account information, GST numbers, and transaction records for invoicing and payment processing.
  • Project Information: Business requirements, project briefs, content, and communications related to service delivery.

1.2 Information Collected Automatically

  • Usage Data: IP address, browser type, device information, operating system, pages visited, time spent, and referral sources.
  • Cookies and Tracking: We use cookies and similar technologies to improve user experience and analyze site usage. See our Cookie Policy for details.

2. How We Use Your Information

We use collected information for the following purposes:

  • Service Delivery: To provide, manage, and deliver our IT and digital services, including project execution and support.
  • Communication: To respond to inquiries, send project updates, invoices, and transactional emails.
  • Legal and Contractual: To enforce our Terms of Service, process payments, comply with tax and legal obligations, and resolve disputes.
  • Improvement: To analyze website usage, improve our services, and develop new offerings.
  • Marketing: With your consent, to send newsletters, promotional materials, or updates. You may opt out at any time.

3. Legal Basis for Processing

Where required by applicable law (such as the GDPR), we process your personal information based on one or more of the following:

  • Consent: You have provided explicit consent (e.g., via contact forms, cookie consent, or agreements).
  • Contract: Processing is necessary to fulfill a contract with you (e.g., delivering services).
  • Legal Obligation: We are required by law to process certain data (e.g., tax records, invoices).
  • Legitimate Interest: For business operations, fraud prevention, and improving our services, where those interests are not overridden by your rights.

Under the CCPA, California residents have additional rights including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. Under the DPDP Act 2023, Indian data principals have rights to access, correction, and erasure of personal data, which we honour upon request.

4. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your data only in the following circumstances:

  • Service Providers: Third-party vendors (e.g., payment processors, hosting providers, email services) who assist us in delivering services, under strict confidentiality agreements.
  • Legal Requirements: When required by law, regulation, legal process, or government request (e.g., tax authorities, court orders).
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
  • Protection of Rights: To protect our legal rights, prevent fraud, or ensure safety and security.

5. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Typically, we retain:

  • Client Data (contracts, invoices, tax records): For the duration of the engagement and up to 7 years thereafter, as required for legal, tax, and accounting purposes.
  • Project Correspondence and Support Records: For the duration of the engagement and up to 3 years thereafter.
  • Website Usage Data: For up to 2 years to analyze trends and improve services.

After the retention period, data is securely deleted or anonymized.

6. Data Security

We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure servers, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your data, subject to legal and contractual obligations (e.g., tax records must be retained).
  • Objection: Object to processing based on legitimate interest or for marketing purposes.
  • Portability: Request a copy of your data in a structured, commonly used format (where technically feasible).
  • Withdrawal of Consent: Withdraw consent at any time, though this may affect our ability to provide services.

To exercise your rights, please contact us at support@bcnstudio.tech. We will respond within 30 days of receipt, or within the timeframe required by applicable law.

8. Cookies and Tracking Technologies

We use cookies to enhance user experience, analyze website traffic, and remember preferences. You can control cookies through your browser settings or our cookie banner. For more details, see our Cookie Policy.

9. Use of Google Analytics 4 (GA4)

Our website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited ("Google"). GA4 uses cookies and similar technologies to collect and analyze information about how visitors use our website, including pages visited, interactions, browser and device type, approximate city-level location, time spent, and referring websites. The information generated by cookies may be transmitted to and stored by Google on servers located in the European Union or the United States. Google processes this data on our behalf under theGoogle Ads Data Processing Terms.

Purpose of Processing

  • Understand how visitors interact with our website
  • Improve design, functionality, and user experience
  • Measure traffic sources and marketing performance

Data Collected by GA4

  • Pseudonymous identifiers (e.g., _ga cookie ID)
  • Event data such as page views, clicks, or session duration
  • Aggregated statistics used for trend analysis

We do not send or store personally identifiable information (PII) such as names, emails, or contact details through Google Analytics. However, certain technical data (such as IP addresses) may be considered personal data in some jurisdictions.

Legal Basis for EEA/UK

For visitors from the European Economic Area (EEA) and the United Kingdom, analytics processing is based on consent under Article 6(1)(a) GDPR. Analytics cookies are activated only after you provide consent via our cookie banner.

Analytics Data Retention

Analytics cookies may remain on your device for up to 2 years, but the analytics event data associated with them is retained by Google for up to 14 months, after which it is automatically deleted.

Opt-Out Options

Additional Information

Learn more about how Google collects and processes data:How Google uses information from sites or apps.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

11. International Data Transfers

Your data may be stored and processed internationally. If we transfer data across borders (e.g., to cloud providers with international infrastructure), we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections under GDPR and DPDP Act.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated Policy will be posted on this page with a revised "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated Policy.

14. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or data protection, please contact us at:

Email: support@bcnstudio.tech

We will address your inquiry within 30 days of receipt.