1. Who We Are

itsk.studio is a brand of Kurt Leeuw Consultoria Lda, a company registered in Portugal (VAT PT513.386.572), with registered offices at Rua Afonso Domingues 13, 1170-001 Lisbon. We are the data controller responsible for your personal data collected through this website and in the course of our services.

If you have any questions about how we handle your personal data, please contact us at info@itsk.studio.

2. What Data We Collect

We may collect and process the following categories of personal data:

• Contact information: name, email address, phone number, and any other details you provide when submitting a contact or enquiry form.
• Account information: email address and password (stored in encrypted form) when you create an account in our Furniture Store.
• Order and transaction data: billing address, delivery address, and purchase history when you place an order through our store.
• Communication records: messages and emails exchanged with us in the context of an enquiry or project.
• Technical data: IP address, browser type, device type, pages visited, and time spent on pages, collected automatically via cookies and analytics tools.
• Marketing preferences: your consent choices regarding email and SMS communications.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide the services you have requested (legal basis: performance of a contract or pre-contractual steps).
• To manage your account and orders in our Furniture Store (legal basis: performance of a contract).
• To send you marketing communications — only with your explicit consent and only by the channels you agreed to (legal basis: consent).
• To comply with legal obligations, such as issuing invoices and retaining accounting records as required by Portuguese law (legal basis: legal obligation).
• To improve our website and services through anonymised analytics data (legal basis: legitimate interest).

4. Cookies

Our website uses cookies — small text files stored on your device. We use the following categories:

• Essential cookies: required for the website to function correctly (e.g. session management, shopping cart). These cannot be disabled.
• Analytics cookies: help us understand how visitors use our website (e.g. Google Analytics). These are only activated with your consent.
• Marketing cookies: used to personalise advertising (e.g. Google Ads). These are only activated with your consent.

You can manage your cookie preferences at any time using the cookie settings panel at the bottom of this page.

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data: retained for up to 2 years from the date of last contact, unless a business relationship is established.
• Client and project data: retained for up to 7 years after the end of the relationship, in accordance with Portuguese tax and accounting legislation.
• Account data: retained for as long as your account is active. If you close your account, your data will be deleted within 90 days, unless retention is required by law.
• Marketing consent records: retained until you withdraw your consent.
• Analytics data: retained in anonymised form in accordance with Google Analytics default retention settings.

6. Who We Share Your Data With

We do not sell your personal data. We may share it with the following categories of third parties, solely to the extent necessary:

• Shopify Inc.: our e-commerce platform provider, which processes order and account data on our behalf. Shopify is certified under the EU-US Data Privacy Framework.
• Google LLC: for analytics (Google Analytics) and, where consented, advertising (Google Ads). Data may be transferred to the United States under appropriate safeguards.
• Email service providers: used to send transactional and marketing emails.
• Accounting and legal advisors: where required to fulfil our legal obligations.

All third-party processors are bound by data processing agreements and are required to handle your data in accordance with applicable data protection law.

7. International Transfers

Some of our service providers are based outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.

8. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable Portuguese law, you have the following rights regarding your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request that we correct inaccurate or incomplete data.
• Right to erasure: you may request that we delete your data, subject to certain legal exceptions.
• Right to restriction: you may request that we limit how we process your data in certain circumstances.
• Right to data portability: you may request your data in a structured, machine-readable format.
• Right to object: you may object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@itsk.studio. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), restricted access controls, and regular security reviews. No method of transmission over the internet is completely secure; however, we take all reasonable steps to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the date below. We encourage you to review this page periodically.