Privacy Policy

Who we are

Everyface Studio is a film studio for health and life-science teams. This policy explains what personal data we collect, why, and what you can do about it.

Data controller: Otter Studios SL, NIF B21772884, Spain, trading as Everyface Studio.

Contact: hello@everyfacestudio.com and +34 649 337 063.

What we collect

When you contact us. Your name, email address, company, role, and whatever you write in your message. We collect this so we can reply and discuss working together.

When you book a call. Our scheduling is handled by Calendly. They collect your name, email, and the time you choose. Their privacy policy applies to that data.

When you visit the site. We use privacy-friendly analytics that measure page visits, referring sites, and general country-level location. This data is aggregated and does not identify you. We do not build advertising profiles and we do not sell data.

When we work together. Contact details, contract and billing information, and the files needed to deliver the project.

Why we can use it (legal bases)

• Consent - for optional cookies and any marketing email you opt into. You may withdraw at any time.
• Contract - to quote for, deliver, and invoice a project.
• Legitimate interests - to reply to enquiries, keep the site secure, and understand in aggregate how the site is used.
• Legal obligation - to keep accounting and tax records.

Filming and production data

When a project involves filming people, we handle personal data on behalf of our client, who is normally the controller. We work under a written agreement, we obtain written consent or a release from everyone who appears on camera, and we keep footage only as long as the project and its agreed licence require. Where footage relates to a person's health, we treat it as special-category data and rely on the participant's explicit consent. Consent can be withdrawn; tell us and we will act on it.

Who we share it with

We use a small number of service providers who process data on our behalf: website hosting, analytics, email, scheduling, cloud storage and file transfer, and accounting. Each is bound by contract to protect your data. Where a provider is outside the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. We never sell your personal data.

How long we keep it

• Enquiries that go nowhere: up to 24 months.
• Client records and contracts: as long as the relationship lasts plus the retention period Spanish law requires (generally six years for accounting).
• Production footage: per the project agreement.
• Analytics: aggregated and retained no longer than 26 months.

Your rights

Under the GDPR you may request access to your data, correction, deletion, restriction, portability, and you may object to processing based on legitimate interests. Where processing rests on consent, you can withdraw it at any time without affecting what came before.

Write to hello@everyfacestudio.com and we will respond within one month. If you are unhappy with our response you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority where you live.

Security

We use access controls, encryption in transit, and reputable providers. No system is perfectly secure, and we will tell you and the authorities if a breach occurs that puts your rights at risk.

Children

This site is for professionals and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

We update this policy when our practices change. The date at the top shows the current version.