privacy
Privacy policy
Studio Vella is a concept site by concierge.studio. The data controller is concierge.studio (sole trader, Malta). Last reviewed 2026-05-04.
What we collect
Only what you give us via the contact form (name, email, project type, notes, consent flag), what you say to Lina (the agent transcript), and anonymous analytics — pageviews, prompt clicks, agent answer/no-answer events. IPs are SHA-256 hashed with a daily-rotating salt before storage.
Why we collect it
To reply to you. To know whether the concierge is doing its job (the no-answer rate). To stop spam (rate limit on the lead form).
Processors
| Processor | Role | Region | Data |
|---|---|---|---|
| Cloudflare | Hosting (Pages, D1, KV) | EU + global edge | page requests, D1 rows, KV dead-letter, hashed IPs |
| Google AI (Gemini Flash-Lite) | Concierge agent inference | USA | your message text + transcript ID; no name or email unless you typed it |
| Resend | Email delivery | USA | to/from/subject/body of the lead-notification email |
Retention
| Dataset | Window | Deletion path |
|---|---|---|
| leads (D1) | 18 months from last contact | anonymise on request via DSAR |
| transcript_messages (D1) | 12 months | purge on request |
| analytics_pageviews / events | 90 days, then aggregated | no PII; daily-rotating salt on IP hash |
| DEAD_LETTER (KV) | 7 days | auto-expire |
| audit_log | 13 months | operator records only; never deleted |
Your rights (GDPR + Malta DPA)
You can ask us to export or deleteeverything we hold about you. Use the form below — we respond within 30 days. If you'd rather, email portfolio@concierge.studio and we'll do it manually.
Data subject access request
Studio Vella is a portfolio piece — no goods or services are sold. The contact form lands at a real inbox, but no payment data is ever collected on this site.