Privacy Policy

Knox Design Studio, owner's full legal name, Haarenfeld 52A, 26129 Oldenburg (Oldb), Germany. Contact for privacy requests: support@knoxdesignstudio.com.

Data you provide via the contact form, the order process (cart/checkout), or by contacting us directly, plus technical data generated when you visit the site.

This site is hosted by hosting provider name and address, acting as our processor under Art. 28 GDPR. Server log files (IP address, date/time, requested page, browser) are processed to keep the site secure and stable (Art. 6(1)(f) GDPR) and are deleted automatically after 14 days at the latest, unless retention is needed as evidence.

Data you enter (name, email, phone, company, message) is processed to handle your enquiry, on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding). Current status: the form on this site is currently a demo and does not send your details to any mailbox or external service — your data stays in your browser. Please contact us directly by email or phone until this is switched on.

To process an order we handle: name, company (optional), email, phone (optional), billing address, optional EU VAT ID, project details (desired start, brief notes, reference link, preferred language), and your selected packages. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Your cart contents, consent choice, and language preference are stored only in your browser (localStorage — see the Cookie Policy) and are not transmitted to us unless an order is completed.

Payment note: the checkout on this site runs in demo mode. Any card details entered are validated locally in your browser only, transmitted nowhere, and not stored. No real payment is processed. Order data (reference number, summary) is stored locally in your browser to display the confirmation page.

Where a real contract is formed (e.g. after direct contact), invoice-relevant data is retained for the statutory German commercial/tax retention period of up to 10 years (§ 147 AO, § 257 HGB).

With your consent, we use Google Analytics 4, a web analytics service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It may transfer data to servers in the US. Legal basis: your consent only (Art. 6(1)(a) GDPR, § 25(1) TDDDG). The GA4 script is not loaded at all until you actively accept it in the cookie banner — no data is transmitted before that. You can withdraw consent at any time via "Cookie settings" in the footer, with effect for the future.

Access, rectification, erasure, restriction, data portability, and objection (Arts. 15–21 GDPR). You can withdraw consent at any time. You may lodge a complaint with a supervisory authority, in particular: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.

Data is deleted once its purpose no longer applies, unless a statutory retention obligation (§5 above) requires otherwise.

We update this policy as our processing changes; the version published on this page is the current one.