Legal

Privacy policy

The short version: I collect as little as possible. What you type into the contact form is what I use to answer you. Measuring how the site gets used happens only if you allow it.

Last updated: 17 August 2026

Who processes your data

Frontal Studio is a brand of Frontal Design BV. That company is the controller responsible for processing your data.

Frontal Design BV, Oude Antwerpsebaan 41, 2800 Mechelen, Belgium. VAT BE0772891149. Reachable at matijs@frontalstudio.com.

What I collect

Only what you fill in yourself, plus the minimum a server needs to work.

From the contact form: your name, your email address, your message, and your phone number if you enter one.
Technical: your IP address. It keeps the form usable by holding back spam, and it appears in the server logs.
From the correspondence afterwards: whatever you email or tell me in response to your message.

Why, and on what grounds

Three reasons, each with a basis under the GDPR.

To answer your question. You fill in the form with a possible collaboration in mind, so the processing is necessary to take steps at your request before entering a contract (article 6.1.b).
To hold back spam. I have a legitimate interest in that (article 6.1.f): without the check the form fills up and a real message never reaches me.
To measure how the site gets used. That happens only with your consent (article 6.1.a), and you can withdraw that consent at any time.

Cookies and measurement

On your first visit I ask whether I may measure how the site gets used. Until you make that choice, nothing happens. If you refuse, no script is loaded and no cookie is placed. Refusing takes one click, exactly like accepting.

If you say yes, Google Tag Manager loads, which in turn loads Google Analytics. That shows me which pages get read and where visitors drop off. I do not use it to target advertising and I do not connect it to your contact details.

Your choice lasts twelve months and you can change it at any time, at the bottom of this page.

Google Analytics also processes data outside the European Economic Area. Google does so on the basis of the European Commission's standard contractual clauses.

The fonts sit on my own server rather than at Google, so opening a page sends nothing there in any case, with or without consent.

Which cookies exactly

Only these. The first one is what remembers your choice, so it is always there, including when you refuse.

Who else sees your data

I do not sell your data and I do not share it for marketing. These parties come into contact with it, because they supply the technology the site runs on.

Resend, which sends the message from the contact form. My account runs in the EU region, so that processing stays within the European Economic Area.
Google Workspace, where the mailbox that receives your message sits.
Google Tag Manager and Google Analytics, but only if you consent to it. If you refuse, they never come into play.
The server the site runs on. I manage that myself.

How long I keep it

Messages from the contact form I keep until two years after our last contact, then I delete them.

If it turns into a project, the invoices and the data belonging to them fall under the statutory retention period for bookkeeping.

What you can ask for

You have the right to know what data I hold about you, to have it corrected or deleted, to have the processing restricted, to object to it, and to receive your data in a readable file.

One email to matijs@frontalstudio.com is enough. You will hear from me within a month.

If you and I do not work it out

Then you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be.

Changes

If anything changes about the way I process data, I update this page and move the date at the top.