Privacy Policy

Who we are

zAmya Studio is a trading name of zAmya Concepts Ltd, based in Cyprus. We are the data controller responsible for your personal data. You can contact us about anything in this policy at zamya@zamyastudio.com.

The data we collect

Enquiry form. When you send an enquiry, we collect the details you provide: your name, email address, and any property information or message you choose to share, along with a record of your consent.

First Look photos. If you order a First Look, you send us photos of the room you would like styled, together with your answers to a short questionnaire. Please send photos of the space only, without people, documents, or other personal items in view.

Assistant (chat). If you use the on-site assistant, we process the messages you type so we can answer them. Please do not enter personal details into the assistant; it is meant for general questions about our services.

Technical data. Like any website, our host receives standard request information, including your IP address, which is used to deliver the site and to keep it secure (for example, basic rate limiting on the assistant). We do not use analytics, advertising, or tracking cookies.

Why we use it, and our lawful basis

• To respond to your enquiry: your consent, and taking steps at your request before entering into a contract.
• To deliver a First Look you have ordered: performing our contract with you.
• To run the on-site assistant: your consent, given when you choose to send a message.
• To keep the site secure and working (for example, preventing abuse and rate limiting): our legitimate interests in operating a safe, reliable website.

Cookies

This site does not set analytics, advertising, or tracking cookies, and does not store data in your browser for those purposes. Because of that, we do not show a cookie consent banner. If that ever changes, we will ask for your consent first.

Who we share it with

We do not sell your personal data. We share it only with the service providers that help us run the site, each acting on our instructions:

• Web3Forms delivers enquiry-form submissions to our inbox.
• Anthropic processes assistant messages to generate a reply. Inputs are not used to train its models.
• OpenAI processes the room photos you send for a First Look, to create the styled images of your room. Our account is set so that this content is not used to train its models.
• Stripe processes audit payments. Your card details are entered on Stripe's own secure checkout and are never seen or stored by us; we receive confirmation of payment and the booking details you provide.
• Cloudflare hosts the website and processes standard server request data. Its Turnstile bot-protection check runs when you use the assistant or start an audit booking, to tell humans from automated abuse; it sets no tracking cookies and is not used to profile you.

International transfers

Some of these providers are based outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep enquiry details only for as long as needed to handle your enquiry and to keep reasonable records of our correspondence, after which they are deleted. We do not store assistant conversations beyond what is needed to process each message.

We keep First Look photos, and the images we create from them, only for as long as needed to deliver your First Look and any styling work that follows, after which they are deleted. We never publish them without your written permission.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To exercise any of these, email us at zamya@zamyastudio.com and we will respond within the time the law allows.

If you believe we have not handled your data properly, you can also complain to the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page.