Privacy Policy
Last updated: February 2026
Zynopsis Visuals is a photography and film studio based in Helsinki, Finland. This page explains what data we collect through zynopsis.studio, why we collect it, and what control you have over it.
We do not sell personal data. We do not share it with advertisers. We collect the minimum needed to run this site and deliver our services. This policy complies with the GDPR and the Finnish Data Protection Act.
Who is responsible
Zynopsis Visuals, Helsinki, Finland. For anything related to your data, reach us at privacy@zynopsis.studio.
What we collect
Information you give us
Contact form submissions: name, email, company, project details, budget range.
Email correspondence: whatever you share in direct communication.
Client intake: brand questionnaire responses, visual preferences, project briefs.
Billing and contracts: invoicing details and project documentation during an engagement.
Information collected automatically
Device and browser type, screen size, operating system.
Pages visited, time on site, scroll depth, referral source.
IP address (anonymised where possible), approximate location at country or city level.
Cookies and tracking identifiers as described in our Cookie Policy.
Analytics and tracking
We use analytics to understand how visitors use the site. This helps us improve content and performance.
Squarespace Analytics collects page views, visitor counts, traffic sources, and device data. Processed by Squarespace, Inc.
Google Analytics 4 collects aggregated usage data with IP anonymisation enabled. You can opt out via Google's browser add-on.
HubSpot processes inquiry data if you submit the contact form. May set cookies for return visit tracking and email engagement. Certified under the EU-US Data Privacy Framework.
Why we process your data
Under GDPR Article 6, we rely on four legal bases:
Consent when you submit a form or accept non-essential cookies.
Contract when processing is needed to deliver services you have engaged us for.
Legitimate interest for analytics, security, and business communications, where our interests do not override your rights.
Legal obligation for tax, accounting, or regulatory requirements.
How we use your information
Responding to inquiries and providing information about our services.
Delivering and managing contracted work.
Analysing site traffic to improve content and performance.
Sending occasional updates where you have consented or where an existing business relationship exists.
Complying with legal obligations and protecting legitimate business interests.
Who sees your data
We do not sell personal data. We share information only with:
Service providers: Squarespace (hosting), Formspree/HubSpot (forms), Google (analytics), cloud storage. All bound by data processing agreements.
Professional advisors: accountants, legal counsel, auditors where necessary.
Legal authorities: only when required by law or court order.
International transfers
Some providers operate outside the EEA. Where data leaves the European Economic Area, we ensure safeguards are in place: EU Standard Contractual Clauses, adequacy decisions, or certification under the EU-US Data Privacy Framework.
How long we keep it
Inquiries: up to 24 months after last contact, unless a project begins.
Client data: duration of engagement plus 7 years for tax and legal compliance.
Analytics: anonymised data retained indefinitely. Identifiable data retained up to 14 months.
Marketing: until you withdraw consent.
Your rights
Under the GDPR you can:
Access a copy of your data.
Correct anything inaccurate or incomplete.
Delete your data, subject to legal retention requirements.
Restrict how we process it.
Export your data in a machine-readable format.
Object to processing based on legitimate interest or direct marketing.
Withdraw consent at any time, without affecting the lawfulness of prior processing.
Email privacy@zynopsis.studio to exercise any of these. We respond within 30 days. If unsatisfied, you may contact the Finnish Data Protection Ombudsman at tietosuoja.fi.
Security
We use encrypted transmission (TLS/SSL), access controls, and secure hosting. No system is completely immune, but we take reasonable measures to protect your data.
Children
Our services are not directed at anyone under 16. We do not knowingly collect data from children. If we discover we have, we delete it.
Changes
If this policy changes, this page gets updated and the date at the top reflects it.
Zynopsis Visuals
Helsinki, Finland
privacy@zynopsis.studio