KIWA — Digital Studio

Privacy

Last updated 20 August 2026 · kiwastudio.com

This notice explains what personal data Kiwa Digital Studio ("Kiwa", "we") collects through kiwastudio.com, why, and the choices you have. We keep data collection to the minimum: the site sets nothing by default, and usage analytics runs only if you accept on the cookie banner. Beyond that — and the technical logs any host keeps, described below — the site asks you for personal data in exactly two places: when you choose to email us, and when you choose to leave your email in the free GEO Score tool.

Who we are

Kiwa Digital Studio is a digital studio based in Malta, working worldwide, operated by its founder as an independent professional. The founder is the data controller for the information described here. For any privacy question, or to exercise your rights, email admin@kiwastudio.com — it is read by the founder directly. When the studio's registered company details are issued, this section will be updated with the registered name and number.

What we collect

• When you contact us — if you email us (for example via the hello@kiwastudio.com links on the site), we receive what you choose to share: your name, email address and message. We use it only to reply and, if we go on to work together, to deliver the work.
• Hosting & technical logs — the site is hosted on GitHub Pages. To deliver and protect the site, GitHub may process standard technical request data (such as your IP address and browser type) as our hosting provider. We do not use this data to identify or profile you.
• The GEO Score tool — the web address you scan is sent to our scoring API (api.kiwastudio.com) so the audit can run; the scan itself is not written to a database (results are cached briefly at the edge so repeat scans are fast). If you then choose to unlock the full report, we ask for your email address and store it — together with the address you scanned and the score — as an enquiry in our lead database, so we can send the one follow-up note promised on the form. No list, no sequence. If that save does not go through straight away — our database is briefly unreachable, or your connection drops — your email address is held in your own browser's storage and the save is retried automatically the next time you visit; it is discarded after 30 days, or as soon as it goes through. It is never sent anywhere else, and clearing this site's data in your browser removes it immediately.
• Usage analytics — only after you accept on the cookie banner, we use Google Analytics 4 to understand, in aggregate, how the site is used (pages viewed, rough location, device, referring source). Nothing is collected until you accept, and we have configured it not to receive directly identifying information.

Legal basis (GDPR)

• Consent — for analytics cookies, and for the follow-up you request when you leave your email in the GEO Score tool. Opt-in only; you can withdraw at any time (see "Your rights & choices").
• Legitimate interest / steps toward a contract — for responding to enquiries you send us, and for the secure, reliable hosting of the site.

Cookies, analytics & tracking

By default kiwastudio.com sets no cookies. If you accept on the banner, Google Analytics sets first-party cookies (_ga, _ga_*) to measure usage in aggregate. If you decline — or simply ignore the banner — none are set and nothing loads. Your choice is remembered in your browser. We do not use advertising cookies and we do not track you across other websites. This privacy page itself loads no scripts at all.

Who we share data with

We don't sell your data. Email you send us is held in our Google Workspace mailbox. The site itself is served by GitHub Pages. Enquiries from the GEO Score tool are stored with Supabase in its EU (Frankfurt, eu-central-1) region. Analytics data, when you have accepted it, is processed by Google under the Google Analytics Data Processing Terms. These providers act as our processors under their data processing terms, and some may process data outside the European Economic Area under appropriate safeguards (e.g. Standard Contractual Clauses). We do not share your data with anyone else.

How long we keep it

Enquiry emails are kept as long as needed to respond and for our legitimate business records, after which they are deleted — or sooner if you ask us to remove them. GEO Score enquiries are deleted within 12 months of the follow-up, unless we are in an active conversation — or sooner if you ask. Analytics data is retained for a limited period set in Google Analytics (14 months), in aggregate.

Your rights & choices

• Change your cookie choice — open kiwastudio.com/?cookies and the banner will ask again; declining removes analytics from that moment on. (Clearing this site's data in your browser does the same.)
• Under the GDPR you have the right to access, correct, delete, restrict, object to, or port your personal data. To exercise any of these, email admin@kiwastudio.com.
• You may also lodge a complaint with the Maltese supervisory authority (the IDPC).

Changes

If this notice changes, we'll update this page and the date above.