Privacy Policy

Last updated 29 July 2026.

Who We Are

TwoTowerStudio is operated by an individual sole trader based in Latvia. For the purposes of the General Data Protection Regulation (GDPR) and UK GDPR, that individual is the data controller for any personal data collected through this website.

Questions about this policy or how your data is handled: twotowerstudio@gmail.com.

What Data We Collect

Data you give us directly, via the contact form:

—Name and surname

—Email address

—Company name

—Existing website (if provided)

—Expected project timeline

—Budget range

—Details you write about your project

Data collected automatically, via Google Analytics: pages visited, time on site, general location (derived from IP address), device and browser type — collected through cookies (see "Cookies & Analytics" below).

We do not collect payment card details, government ID numbers, or any special category data (health, religion, political opinions, etc.) through this site.

Why We Collect It, and Our Legal Basis

We collect your contact form details (name, email, company, timeline, budget, project information) to respond to your enquiry and prepare a quote or proposal. The legal basis for this is legitimate interest — you've initiated a specific request, and we're using your details only to answer it.

We collect analytics data to understand site traffic and improve the website. The legal basis for this is consent — see the Cookies & Analytics section above for how that consent is obtained.

We do not use your data for automated decision-making or profiling.

Cookies & Analytics

This site uses Google Analytics to understand how visitors use it. Google Analytics uses cookies, which under GDPR and the ePrivacy Directive require your consent before being set for visitors in the EU/UK.

Who We Share Data With

Framer — our website hosting provider, which processes data as part of running the site.

Google (Google Analytics) — processes analytics data on our behalf. Google's servers are located outside the EU/UK (primarily the US), so this involves an international data transfer, covered by Google's own Standard Contractual Clauses.

We do not sell your data to anyone, for any reason.

How Long We Keep Your Data

Contact form enquiries that don't become a client project: kept for 12 months, then deleted.

Enquiries that become a client project: kept for the duration of the working relationship plus a reasonable period afterward for accounting/legal purposes.

Analytics data: retained per Google Analytics' own default retention settings, unless configured otherwise.

Your Rights

Under GDPR/UK GDPR, you have the right to:

—Access the personal data we hold about you

—Correct inaccurate data

—Erase your data ("right to be forgotten")

—Restrict or object to how we process your data

—Port your data to another provider

You can also complain to a supervisory authority — in Latvia, the Datu valsts inspekcija; if you're based elsewhere in the EU or UK, you can also complain to your own country's data protection authority (e.g. the ICO in the UK).

To exercise any of these rights, contact us at the email address above.

Changes to This Policy

If this policy changes, the "Last updated" date at the top will change too. Significant changes affecting how your data is used will be noted here directly.