Privacy policy.

Klaver Studio ("Klaver," "we," "us") is a Shopify development studio operating across the United States, European Union, and Gulf regions. Our registered entity is in the EU; for GDPR purposes, that entity is the controller of personal data described below.

For questions about this policy or to exercise any data rights, reach us at privacy@klaver.studio.

We collect only the information we need to run the studio. Specifically:

• Contact information you submit through forms on this site (name, work email, brand URL, free-text brief).
• Site analytics — aggregate page views, referrers, and cookie-free engagement metrics. We do not run third-party advertising trackers on this site.
• Email correspondence with us, including any attachments you share.
• Information you share during engagements — including store-related data, integrations, and code, governed under a separate Data Processing Agreement when applicable.

We use the information we collect for these purposes only:

• To respond to your inquiry and schedule a strategy call
• To prepare for and deliver work under a signed engagement
• To improve our website and services
• To meet legal and regulatory requirements

We do not sell your information. We do not share it with advertisers.

Inquiry data is stored in EU-based infrastructure by default. Engagement data is stored according to the residency requirements agreed in the Data Processing Agreement. We avoid US-only stacks for partners with EU or Gulf residency requirements.

Under GDPR and equivalent regulations, you have the right to:

• Request a copy of personal data we hold about you
• Request correction of inaccurate data
• Request deletion ("right to be forgotten")
• Restrict processing in certain circumstances
• Object to processing based on legitimate interest
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email privacy@klaver.studio. We respond within 30 days.

Inquiry data is retained for 24 months unless you ask us to delete it sooner. Engagement data is retained per the contractual schedule, with full deletion no later than 12 months after the engagement ends.

We will update this policy when our practices change. The "last updated" date at the top reflects the most recent change. Material changes will be communicated to active partners via email.