10 SEPTEMBER 2026
Privacy
Notice
what we collect, why we have it, and how to make us stop
Who we are
Sielu Studio is the data controller for the personal information described in this notice. That means we decide what information is collected and what happens to it.
We are established in the Netherlands, so our processing is governed by the EU General Data Protection Regulation (GDPR) and the Dutch Telecommunications Act. Where we run events or work with people in the United Kingdom, UK data protection law may also apply. The standards are materially the same, and this notice is written to meet both.
If you have any question about this notice, or want us to do something with your information, email us at the address above and a person will read it.
What this notice covers
This notice explains what we do with personal information belonging to:
- —guests at our events
- —people who subscribe to our updates
- —prospective clients and business contacts
- —clients, collaborators, freelancers and suppliers
- —visitors to sielustudio.com
Each section below tells you what we collect, why, what our legal basis is, and how long we keep it.
If you RSVP to one of our events
What we collect. Your name, email address, job title, the company or studio you work for, your work sector, your Instagram handle, how you heard about the event, anything you tell us about what brings you, whether you're bringing a guest, and any dietary requirements or allergies you share with us.
Why. To manage the guest list, to confirm your place and send you the practical details, to manage admission on the night, and to cater the event properly.
Our legal basis. Our legitimate interests in running an event we've invited you to and being able to communicate with you about it. Dietary and allergy information is handled separately — see the next section.
Who sees it. Your name is shared with the venue and the door team so they can admit you. Dietary information is shared with our caterer. Nobody else receives the guest list.
How long. See the retention table below.
Dietary requirements and allergies
Information about allergies and dietary needs is health information, which the law treats as a special category requiring extra care. We ask for it only so that we can feed you safely.
We rely on your explicit consent to hold it, given when you enter it on the RSVP form. You don't have to provide it, and you can ask us to remove it at any time.
We share it only with the caterer working on that event, and only what they need. We delete it within seven days of the event. It is never added to any longer-term record of you.
Photography and filming at our events
We photograph and film our events, and we use those images in our own marketing, on social media, on our website, and in press coverage of the event.
Our legal basis. Our legitimate interests in documenting and promoting our work. We tell you in advance — in the invitation, in your confirmation email, and with signage at the event — so it isn't a surprise.
If you'd rather not appear. Tell any member of the Sielu Studio team when you arrive and we will make sure the photographer knows. You can also email us afterwards and we will remove you from anything we have published and stop using the image, as long as it is still within our control.
Guests who bring a plus-one should let them know this applies to them too.
Email updates from us
If you opt in, we'll send you invitations to future events and occasional updates about what we're making.
Our legal basis. Your consent. We only send these to people who have actively opted in — a tick box on an RSVP form, or a subscribe link they've clicked. We don't add people to this list because they attended an event, gave us a card, or work at a company we'd like to talk to. Dutch law requires consent for this kind of email whether you're subscribing personally or on behalf of a business, and we apply the same standard to both.
Leaving. Every email has a one-click unsubscribe. You can also just reply and ask. Once you've left, we keep a minimal record of your email address on a suppression list so that we don't accidentally contact you again — this is the one thing we keep specifically in order to stop emailing you.
How long. For as long as you're subscribed, plus a short period afterwards to action the unsubscribe.
If we get in touch about working together
If we meet you at an event or through our work and think there may be a genuine reason to work together, we may contact you directly about it.
What we use. Your name, work email address, job title and employer, and a note of where and when we met.
Our legal basis. Our legitimate interests in developing our business, balanced against your interest in not receiving unwanted approaches. We keep this proportionate: a small number of relevant, individual approaches to people we've actually met, in a business context, about work that plausibly relates to what they do.
Saying no. Tell us and we'll stop, permanently. Every such email will make that easy.
Clients, collaborators, freelancers and suppliers
If you work with us or for us, we hold the information needed to run that relationship: contact details, contract documents, invoices, bank details, and correspondence.
Our legal basis. Performance of our contract with you, and our legal obligations — Dutch law requires us to keep business and tax records for seven years.
We share what's necessary with our accountant, our bank, and the software we use to issue and process contracts and invoices.
Our website and cookies
sielustudio.com uses cookies and similar technologies. Cookies that are strictly necessary to make the site work are set automatically. Cookies used for analytics or marketing are set only with your consent, which we ask for through the banner shown when you first visit the site. You can change your choice at any time.
Who we share information with
We don't sell personal information, and we don't share it for anyone else's marketing.
We share it with:
- —Our venues, caterers and event security, so that events can run — names for admission, dietary needs for catering.
- —Service providers who process information on our behalf, under contracts that require them to protect it and use it only on our instructions. These include our email and file storage provider, our internal messaging tool, our event and RSVP platform, our email newsletter platform, our design tools, our e-signature providers, and our accounting software.
- —Our professional advisers, including our accountant and lawyers, where needed.
- —Public authorities, where the law requires it.
If you would like to know which specific providers we use, email us and we'll tell you.
Sending information outside the EEA
Some of the providers we use are based in, or store data in, the United States. Where information leaves the European Economic Area, we rely on the safeguards the law provides — either the provider's certification under the EU–US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission.
You can ask us for details of the safeguards that apply to any particular transfer.
How long we keep things
Your rights
You have the right to:
- —Access the personal information we hold about you, and get a copy
- —Correct it if it's wrong or incomplete
- —Delete it, where we no longer have a good reason to keep it
- —Restrict what we do with it while a question about it is resolved
- —Object to us using it where we've relied on our legitimate interests — including, always and without needing a reason, to direct marketing
- —Portability — receive certain information in a machine-readable format
- —Withdraw consent at any time, where we've relied on it, without affecting anything we did beforehand
To use any of these, email us at info@sielustudio.com. We'll respond within one month. We won't charge you, and we won't ask why.
We don't make any decisions about you by automated means, and we don't profile you.
Complaints
If you're unhappy with how we've handled your information, please tell us first — we'd rather fix it.
You also have the right to complain to a data protection regulator:
- —Netherlands (our lead regulator): Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl
- —United Kingdom, if you attended one of our UK events or are based there: Information Commissioner's Office — ico.org.uk
Changes to this notice
We'll update this notice when what we do changes. The version number and date at the top will tell you which version you're reading. If we make a change that materially affects people already on our lists, we'll tell them directly rather than relying on them to check this page.