Privacy
Privacy notice
What this site collects, why, and what you can ask us to do about it.
Last updated 14 September 2026
Who we are
Solrik Studio, based in Utrecht, the Netherlands. For anything in this notice, reach us through the contact form. We are the data controller for personal data collected through this site.
What this site collects
Two things, and nothing else.
The contact form. When you send an inquiry we receive your name, email address, company name if you give one, the type of work you selected, and your message. We use it to answer you and, if we end up working together, to carry out the project. The legal basis is our legitimate interest in responding to people who contact us, and taking steps at your request before entering a contract.
Server logs. Our hosting provider records standard technical information for every request: IP address, browser type, the page requested and the time. This happens automatically on any website and is used to keep the site running and secure. The legal basis is our legitimate interest in operating a functioning, secure site.
What this site does not do
There are no cookies, no analytics, no tracking pixels, no advertising tags and no social media embeds. Fonts are served from this site rather than from a font provider. Nothing you do here is shared with an advertising network, and no profile is built about you. This is why you are not being asked to accept cookies.
Who else sees it
Our hosting provider stores the site and processes form submissions and server logs on our behalf, under a data processing agreement. Inquiry emails are delivered to a Google-hosted mailbox. We do not sell personal data, and we do not share it with anyone else unless the law requires it.
Depending on the provider, data may be processed outside the European Economic Area. Where that happens it is covered by the transfer safeguards in the provider's data processing terms.
How long we keep it
Inquiries that do not lead to work are deleted within two years. Where we do work together, correspondence is kept for as long as the business relationship lasts and then for the period Dutch law requires records to be retained. Server logs are kept for the short period our host retains them, typically a few weeks.
Your rights
Under the GDPR you can ask us for a copy of the personal data we hold about you, to correct it if it is wrong, to delete it, to restrict how we use it, to receive it in a portable format, or to object to us processing it on the basis of legitimate interest. Ask through the contact form and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
If this notice changes we will update the date at the top. Material changes will be described here rather than made quietly.