Privacy Policy

Who we are

Sparza Studio (“Sparza”, “we”, “us”) is an independent growth studio serving HVAC companies and restaurants. We are the data controller for the personal data described in this policy.

For any question about this policy or about how we handle your data, write to hello@sparza.co.

What this policy covers

This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and what rights you have. It covers this website only. Work carried out for clients is governed by the separate agreement signed for that engagement, which takes precedence where the two differ.

What we collect

We keep data collection to the minimum needed to reply to you and to keep the site working.

• Enquiry details. When you submit the contact form we receive the name, email address, selected service, and message you provide. Supplying these is voluntary, but without them we cannot respond.
• Email correspondence. If you email us directly, we hold that correspondence and any details it contains.
• Server logs. Our hosting provider records standard technical data — IP address, browser type, requested page, and timestamp — as part of serving and securing the site.
• Analytics and performance. We use Vercel Web Analytics to measure anonymous, aggregate information about page views, referrers, approximate location, browser, operating system, and device type. We use Vercel Speed Insights to measure Core Web Vitals and related route, browser, device, network, and country information. Vercel states that Web Analytics data is not associated with an individual or IP address and does not track visitors across websites; Speed Insights data is likewise not tied to an individual or IP address and cannot reconstruct a browsing session across pages. Web Analytics does not use cookies, and we do not send custom analytics events. If your browser sends a Do Not Track signal, this site does not load Web Analytics; Speed Insights continues to collect anonymous performance measurements. We use this aggregate information to understand site usage and improve its content and performance. See Vercel’s Web Analytics privacy documentation and Speed Insights privacy documentation.

What we do not collect

We do not collect special category data, we do not knowingly collect data from children, we do not buy contact lists, and we do not sell or rent personal data to anyone.

Why we use it, and our legal basis

Where data-protection law requires a legal basis, we rely on the following:

• Legitimate interests — responding to enquiries, keeping records of our business conversations, protecting the site from abuse, and understanding aggregate site usage and performance.
• Consent — where you opt in to something specific, such as a mailing list. You can withdraw consent at any time.
• Legal obligation — retaining records we are required by law to keep, such as those relating to invoicing and tax.

How long we keep it

Enquiries that do not become projects are deleted within 24 months of our last exchange. Records relating to client engagements are kept only as long as needed to provide the service, resolve disputes, and meet applicable accounting, tax, or legal obligations. Server logs are retained according to our host’s standard retention period.

We review what we hold periodically and delete what we no longer need.

Who else sees it

We share personal data only with service providers who process it on our behalf, under contract, and only as needed to run the studio:

• Our website host and analytics provider, Vercel, which serves the site, stores server logs, and processes anonymous Web Analytics and Speed Insights data.
• HubSpot, which receives contact-form submissions and stores them in our customer relationship management system so we can respond to and manage enquiries.
• Our email service provider, which delivers and stores correspondence.
• Professional advisers, such as our accountant, where required.
• Public authorities, where we are legally obliged to disclose.

Where personal data is transferred internationally, we use safeguards required by applicable law and rely on our providers’ contractual data-protection commitments.

Cookies

This site does not currently set analytics or marketing cookies. Vercel Web Analytics identifies a daily visitor using a hash created from the incoming request rather than a cookie; Vercel automatically discards that identifier after 24 hours. Speed Insights collects anonymous performance measurements through browser APIs. If we add a service that uses non-essential cookies, we will update this policy and obtain consent before that service loads where required.

Your rights

Depending on where you live, privacy law may give you the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where there is no overriding reason for us to keep it;
• restrict or object to our processing, including any direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, where consent is the basis we relied on.

To exercise any of these, email hello@sparza.co. We will respond within the timeframe required by applicable law. You may also complain to the privacy or data-protection authority where you live.

Security

The site is served over HTTPS and access to enquiry data is limited to the people in the studio who need it. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the small volume of data we hold, and we will notify you and the relevant authority of a breach where the law requires it.

Changes to this policy

If we change how we handle personal data we will update this page and the date shown at the top. Material changes will be flagged clearly rather than made quietly.