Who we are
Mar Sabi Studio (operated by Mar Sabi Studio LLC, a limited liability company registered in Wyoming, United States, at 30 North Gould Street, Sheridan, Wyoming 82801) is the data controller responsible for this website and any personal data you share with us through it.
You can reach us at hello@marsabi.studio for any privacy-related question or to exercise your rights.
What personal data we collect
We collect personal data in the following situations:
- Contact form submissions: your email address, optional project URL, and the message you write to us.
- Direct correspondence: any information you choose to share when you email us, message us on WhatsApp, or connect on LinkedIn.
- Newsletter sign-ups: your email address, and optionally a name, when you subscribe to our newsletter.
- Resource downloads: your email address (and optionally a name or role) when you request a downloadable resource, guide, template, or other free material we offer.
- Analytics and cookies: if you consent via our cookie banner, we collect information about how you interact with the Site — pages viewed, referring URL, approximate location (derived from IP), device and browser type, and similar technical data. Some of this may be collected through cookies or pixels set by third-party analytics and advertising providers.
Why we process it (legal basis)
For visitors in the EU, UK, or other jurisdictions covered by GDPR or UK GDPR, we rely on the following legal bases:
- Article 6(1)(b) — pre-contractual measures and contract performance: to respond to inquiries, to scope and deliver work if we engage, and to deliver any free resource you request from us (the resource is the “contract” we're fulfilling).
- Article 6(1)(a) — consent: for newsletter subscriptions, follow-up marketing emails, and any analytics, advertising, or marketing cookies set after you accept them via our cookie banner. You can withdraw consent at any time — see “Your rights” below.
- Article 6(1)(f) — legitimate interest: to keep simple records of who we've spoken with, to prevent spam and abuse, to understand aggregate Site usage where it doesn't require consent, and to operate our studio. Our interests are balanced against your privacy rights and you can object at any time.
International data transfers
Mar Sabi Studio is operated from the United States, and most of our service providers (hosting, email, analytics, email marketing, advertising platforms) are US-based. If you are located in the EU, UK, or another region with comparable data protection rules, your personal data is transferred to the United States when you contact us, subscribe to our newsletter, request a resource, or interact with the Site.
Where required, these transfers rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK International Data Transfer mechanisms entered into with our service providers, or on the EU–US Data Privacy Framework where the recipient is self-certified.
How long we keep it
We keep personal data only as long as we need it for the purposes described above:
- Active project conversations: for the duration of our correspondence and any resulting engagement.
- Inquiries that do not result in a project: kept for as long as they remain relevant to a potential future engagement, and deleted on request.
- Newsletter subscribers: until you unsubscribe. We also remove subscribers who have shown no engagement for an extended period (typically 12–24 months) to keep the list clean.
- Resource download records: kept for up to 24 months after the download so we can follow up with related material if you've also opted in to that, and deleted on request.
- Analytics data: retained for up to 14 months as configured in Google Analytics 4, then automatically deleted or aggregated by Google.
- Records we are legally required to keep (such as invoices and tax records) are retained for the statutory retention period applicable in our jurisdiction.
Your rights
If you are in the EU, UK, EEA, or Switzerland, you have the following rights under GDPR / UK GDPR:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to pause processing while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where we rely on consent (newsletter, analytics cookies, advertising cookies), you can withdraw it at any time without affecting the lawfulness of processing before withdrawal. Use the unsubscribe link in any marketing email, change your choices in the cookie banner, or email us.
- Complaint — lodge a complaint with your local supervisory authority (for example, the ICO in the UK or your national Data Protection Authority in the EU).
To exercise any of these rights, email us at hello@marsabi.studio. We will respond within 30 days.
California residents have similar rights under the CCPA/CPRA — the same email address handles those requests.
Newsletter and marketing emails
Our newsletter and any free resources we offer are kept as separate opt-ins:
- Newsletter: you only join our list when you actively sign up for it. We send occasional updates about new work, articles, and studio news. You can unsubscribe at any time using the link in any email, and we will stop sending immediately.
- Resource downloads: when you request a free resource (guide, template, etc.), we use your email solely to deliver the file and, where you have given separate consent, to send a short follow-up about related material. We do not automatically add you to the newsletter — that requires its own opt-in.
You can ask us to remove you from any of our lists at any time by using the unsubscribe link in the email or by emailing us at hello@marsabi.studio.
Children
The Site and our services are not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.
Security
We use service providers that maintain industry-standard security practices (encrypted transport, access controls, regular updates). No system is perfectly secure, but we take reasonable steps to protect the data you share with us.
Changes to this policy
We may update this policy as our practices or applicable laws change. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted on this page.