Approach
IK Studios treats GDPR as an operating standard: clear notices, limited collection, appropriate security, processor discipline, rights handling, and sensible retention.
Client projects may require client-specific privacy, consent, DPA, accessibility, or compliance review outside IK Studios general website obligations.
Rights requests
Where GDPR applies, individuals may request access, correction, deletion, restriction, portability, objection, or consent withdrawal.
Requests may be sent to hello@ikstudios.nl. We may verify identity and authority before acting.
Processors and transfers
IK Studios may use processors for hosting, email, storage, payments, accounting, AI, security, project management, and analytics where enabled.
International transfers should use appropriate safeguards where required.
Retention
Data is retained for inquiry handling, project delivery, legal obligations, accounting, dispute resolution, portfolio rights, security, and legitimate studio records.
Data that is no longer needed should be deleted, anonymised, or archived under appropriate access restrictions.