Privacy Policy
Last updated: 15 September 2026
1. Who we are
Sitefirst Studio is a sole proprietorship registered in Hungary (“we”, “us”). We are the data controller for the personal data described below. Our full registered details are provided on request and on every invoice. Contact: [email protected].
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Publicly available business information (business name, trade, address, phone, opening hours, public website, public Google reviews and ratings) | Designing a website preview for your business and contacting you about it | Legitimate interest (Art. 6(1)(f)) |
| Business contact details (name, work email address) | Sending a limited number of emails about your preview | Legitimate interest (Art. 6(1)(f)) |
| Details you submit in our forms (name, business, city, email, website) | Building and sending the preview you requested | Steps prior to a contract (Art. 6(1)(b)) |
| Client data (contact and billing details, domain access, content you send us) | Delivering, hosting and supporting your website; invoicing | Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Payment data | Processing payments. Card details are handled by Stripe and never stored by us | Contract (Art. 6(1)(b)) |
We do not sell personal data, and we do not use advertising cookies or trackers on this website.
3. Your right to object and opt out
You can object to our processing at any time. Reply “remove” to any of our emails, or write to us. We will stop contacting you, take down any preview built for your business, and delete the related data, except for a minimal suppression record so we never contact you again.
4. Service providers
We use trusted processors bound by data processing agreements:
- Cloudflare for website hosting, DNS and email forwarding
- Stripe for payments
- Instantly and our email mailbox provider for sending and managing email
- Apify for collecting publicly available business listing data
- Our accountant and invoicing software, for legally required bookkeeping
Some providers are based in or transfer data to the United States. Where they do, transfers are covered by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
5. How long we keep data
- Prospect data and previews: up to 6 months after our last contact, unless you become a client
- Client data: for the duration of our contract, plus up to 1 year for support
- Invoices and accounting records: 8 years, as required by Hungarian accounting law
- Opt-out (suppression) records: kept as long as needed to honor your request
6. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to processing. Email us and we will respond within 30 days. You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11, naih.hu, or with the data protection authority in your own country.
7. Changes
We may update this policy. The date at the top shows the latest version.