Privacy, in plain language.

01. Who to contact

Pentos Studio is the studio responsible for handling enquiries through this website and is part of Sundifu Group & Technologies. For privacy questions or requests, email info@pentosstudio.com.

Responsible business: PENTOS STUDIO

We serve clients worldwide, with locations in Germany and Sierra Leone.

02. Information you share

When you contact us, we receive the information you choose to provide: your name, email, optional phone number and company, the service you are interested in, and your project details. Email and WhatsApp conversations also include the messages and attachments you send.

We use this information to understand your requirements, reply, prepare proposals and manage our working relationship. Please avoid sending passwords, payment-card details or sensitive personal information in an enquiry. Providing enquiry information is voluntary, but we need a way to reply and enough detail to understand your request.

03. Why we process information

Where the GDPR applies, steps towards a project you request and the delivery of agreed services rely on Article 6(1)(b). Business correspondence, website security and preventing misuse rely on our legitimate interests under Article 6(1)(f). Required business records rely on applicable legal obligations under Article 6(1)(c).

Optional analytics relies on your consent under Article 6(1)(a). Sending an enquiry does not subscribe you to a marketing list. This website does not make decisions about you that have legal or similarly significant effects using solely automated processing.

04. Website operation and service providers

Website infrastructure may process technical information such as IP address, browser, requested page, time and diagnostic logs to deliver and protect the site. Our planned production hosting provider is Vercel.

When the project form is enabled, Supabase stores enquiries and provides staff authentication, Resend delivers enquiry notifications, and Cloudflare Turnstile helps prevent automated abuse. Turnstile processes browser and connection signals for that security check. The enquiry system uses hashed identifiers for rate limiting rather than saving raw IP addresses in enquiry records.

If the form is unavailable, its on-screen notice will say so: it will not send or save your entered enquiry. Direct email and WhatsApp remain separate ways to contact us.

Access to enquiry records is restricted to authorized studio staff and service providers supporting these functions. We do not sell enquiry information. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

Provider information: Vercel · Supabase · Resend · Cloudflare Turnstile.

05. Cookies and optional analytics

We use local storage to remember when you have opened the catalogue, so we can stop suggesting it on that browser. Dismissing the suggestion does not mark the catalogue as visited. This preference stays on your device until browser storage is cleared and is not sent to our servers. Staff sign-in uses necessary session cookies. If optional visit analytics is enabled, we ask before loading it. Your choice is saved in your browser’s local storage. You can change it using Analytics preferences, including on this page when analytics is available.

Our configured Vercel Web Analytics integration does not include enquiry fields and removes query strings and fragments from the page addresses it reports. Declining optional analytics does not prevent you from browsing or contacting us. Read about Vercel’s analytics privacy practices.

06. WhatsApp and external links

WhatsApp, social-platform and Sundifu Group links open a separate website or application. Those services apply their own privacy practices. Clicking a WhatsApp link opens a draft message; you decide whether to send it. Using these links does not submit the project form.

07. Storage, transfers and retention

Providers may process information outside your country, including outside the European Economic Area. Where applicable, such transfers require an appropriate legal mechanism, such as an adequacy decision or standard contractual clauses. You can contact us for information about the arrangements relevant to your enquiry.

Retention depends on whether an enquiry is still active, becomes a client project, is needed for a dispute, or falls under legal record-keeping duties. Closed enquiries should be deleted when those purposes no longer apply. Technical logs and provider backups follow the applicable service retention settings; deletion from a live system may not immediately remove a protected backup.

08. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your information. You may object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing.

Email info@pentosstudio.com to make a request. We may need proportionate information to verify your identity. Rights are subject to legal conditions, including obligations to retain certain records.

You may also complain to the data-protection authority in the country where you live, work or believe an infringement occurred. Find a European data-protection authority.

09. Changes to this policy

We update this page when the website or its processing practices change. The date above identifies the latest revision. Contact us if you would like clarification about any part of this policy.