Last updated: 28 September 2026
This policy explains how Kansu Studios, a trading name of Kansū Holding Pte Ltd ("we", "us"), collects and uses personal data when you visit our website, enquire about a project or work with us. We are the data controller. We comply with Singapore's Personal Data Protection Act 2012 (PDPA) and, where they apply, the EU GDPR and UK GDPR.
1. Data we collect
Contact details (name, email, phone, country): from you, via our Apply page and enquiry form.
Business details (brand name, website, Instagram handle, revenue range, project scope, timelines, budget): from you, via our enquiry form and calls.
Booking data (call date, time, time zone, notes): from you, via our scheduling tool.
Project data (briefs, brand assets, references, feedback, correspondence): from you and your team during a project.
Billing data (billing name, company, address, VAT/tax ID, payment status): from you and our payment provider.
Technical data (IP address, browser, device, pages visited, referrer): from cookies and analytics on our website.
We do not collect card numbers directly; payments are handled by Stripe. We do not knowingly collect data from anyone under 18.
2. How we use it
Respond to enquiries, assess project fit and book calls: steps before entering a contract; legitimate interests.
Deliver the services, manage revisions and communicate about your project: performance of a contract.
Invoice, collect payment and keep accounting records: contract; legal obligation.
Improve our website, understand how visitors find us and measure our advertising: consent (non-essential cookies); legitimate interests.
Send occasional studio updates to business contacts: legitimate interests or consent. You can opt out at any time.
Protect our rights and handle disputes: legitimate interests; legal obligation.
Under the PDPA, we rely on your consent, deemed consent, or the business-improvement and legitimate-interest exceptions as applicable. We use lead scoring to route enquiries to the right type of call; a person reviews every enquiry, and no decision with legal effect is made solely by automated means.
3. Who we share it with
We share personal data only with service providers who help us run the studio, under contracts that require them to protect it:
Website and forms: Framer, Tally
Scheduling and video calls: Cal.com
Storage, email and spreadsheets: Google Workspace
Project management and CRM: ClickUp
Payments and invoicing: Stripe
Analytics and advertising: Framer Analytics, Meta (Meta Pixel)
Our designers and illustrators, who access project data only to deliver your work
Professional advisers (accountants, lawyers) and authorities where the law requires
We never sell personal data.
4. International transfers
We are based in Singapore, and our team and providers operate in several countries, including the EU, UK, US and Asia. Where data leaves the EU or UK, we rely on adequacy decisions or Standard Contractual Clauses (with the UK Addendum). Transfers out of Singapore meet the PDPA transfer obligations.
5. How long we keep it
Enquiries that don't become projects: 24 months from last contact
Client and project records: duration of the relationship + 6 years
Invoices and accounting records: 5 years (Singapore requirement), longer if another law requires
Analytics data: up to 26 months
6. Your rights
You can ask to access, correct, delete or export your data; object to or restrict our use of it; withdraw consent at any time; and opt out of marketing. Email hello@kansustudios.com (subject "Privacy") and we will reply within 30 days. We may need to verify your identity first.
If you are unhappy with how we handle your data, you can complain to Singapore's Personal Data Protection Commission, or, in the EU or UK, your local supervisory authority (for example the CNPD in Portugal or the ICO in the UK). We'd appreciate the chance to resolve it first.
7. Cookies
Our website uses essential cookies to function and, with your consent, analytics cookies (Framer Analytics) and marketing cookies (Meta Pixel) to understand traffic and measure and target our ads on Meta platforms. You can change your choice at any time through the cookie banner or your browser settings.
8. Security
We use access controls, two-factor authentication and reputable providers with encryption in transit and at rest. No system is fully secure; we will notify you and the relevant authority of a notifiable breach as the law requires.
9. Changes
We will post updates on this page and change the date above. Significant changes will be notified to active clients by email.
10. Contact
Data Protection Officer, Kansū Holding Pte Ltd, 68 Circular Road, #02-01, Singapore 049422 — hello@kansustudios.com