1. Who we are
ZTH® Studio is a web design and digital marketing studio based in Malta. This privacy policy explains how we collect, use, and protect your personal data when you interact with us.
Data controller: Jovan Pejic, Zero to Hero Studio
VAT: 32882011
Contact: hello@zerotoherostudio.com | WhatsApp: +356 9905 0236
2. What data we collect
We collect and process the following personal data:
Business contact details: name, email address, phone number, business name, and business address
Communication data: messages sent via WhatsApp, email, or SMS
Website usage: IP address, browser type, and pages visited (via server logs)
Lead information: publicly available business information from directories and social media
3. Legal basis for processing
Under the GDPR, we process your data based on:
Legitimate interest (Art. 6(1)(f)): for B2B outreach and marketing to businesses in sectors we serve
Consent (Art. 6(1)(a)): when you explicitly opt in to receive communications
Contractual necessity (Art. 6(1)(b)): when you engage our services
4. How we use your data
To contact you about our web design and digital marketing services
To create and share preview website designs for your business
To respond to enquiries and provide customer support
To improve our services and understand market needs
5. Data retention
We retain personal data for up to 2 years from last contact, or until you request deletion. If you become a client, we retain data for the duration of our working relationship plus 6 years for tax/accounting purposes.
6. Your rights
Under GDPR, you have the right to:
Access — request a copy of your personal data
Rectification — correct inaccurate or incomplete data
Erasure — request deletion of your data («right to be forgotten»)
Restriction — limit how we process your data
Objection — object to processing based on legitimate interest
Portability — receive your data in a structured, machine-readable format
To exercise any of these rights, contact us at hello@zerotoherostudio.com. We will respond within 30 days.
7. Third-party services
We use the following services to store and process data:
Supabase — cloud database and storage (EU/US servers, GDPR compliant)
Netlify — website hosting and form handling
Meta (WhatsApp Business API) — messaging and communication
Framer — web design, development, hosting and form handling
Webflow — web design, development, hosting and form handling
All third-party providers are vetted for GDPR compliance and process data under Standard Contractual Clauses (SCCs) where relevant.
8. Cookies
Our website uses no tracking cookies. We do not use Google Analytics, Facebook Pixel, or similar tracking technologies. Any cookies are strictly functional (e.g., session management).
9. Data security
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and regular security reviews.
10. International transfers
Some of our service providers (Netlify, Supabase, Meta) may process data outside the EEA. Where this occurs, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
11. Complaints
If you believe we have mishandled your personal data, you have the right to lodge a complaint with the Malta Information and Data Protection Commissioner (IDPC) at idpc.org.mt.
Questions? Reach us at hello@zerotoherostudio.com or WhatsApp +356 9905 0236.