Privacy policy
This policy explains what personal data we process, why, with which providers, and what your rights are. It applies to the bdgstudio.com website, to your exchanges with us and to our relationships with our clients and suppliers. It complies with the Swiss Federal Act on Data Protection (FADP) and, for people located in the European Union, the General Data Protection Regulation (GDPR).
Version of 25 October 2026. This is a translation; in case of discrepancy, the French version prevails.
1. Controller
BDG Studio SNC, a general partnership whose registration with the commercial register of the canton of Vaud is in progress
Chemin des Bosquets 12, 1264 Saint-Cergue (VD), Switzerland
Contact for any question about your data: Guillaume Blouin, partner, guillaume@bdgstudio.com
2. When you visit the website
The website sets no cookies, uses no advertising tools, and loads no fonts or resources from Google: the fonts are hosted on our own server.
To know which pages are visited, we use Vercel Web Analytics, a cookie-free audience measurement tool. It counts visits in aggregate and anonymously, with no identifier kept from one day to the next, and cannot track you from one website to another. We only use the overall statistics (page views, country, device type, referring site).
To display the pages, our hosting provider technically processes your IP address, the date and time of your visit, the page requested and your browser type. This data is used only to run the website and protect it against abuse; we do not use it to identify you or build a profile.
Some images in the Stenciliner section are loaded from stenciliner.com, a service published by BDG Studio and hosted by the same provider.
3. When you write to us
When you use the website form, your name, email address, company name, project type and message are sent to our server, which immediately forwards them to us by email through our email delivery provider, Resend. The website itself does not store them. If sending fails, the form opens your own email app with the message ready to send. When you email us directly, we receive the same information.
The “Book a meeting” buttons open our Google Calendar booking page. Your name and email address are entered there with Google, which creates the meeting in our calendar and sends you the confirmation.
We use this data to reply to you, prepare a proposal and, if you become a client, perform the contract. The legal basis is your request and, where applicable, the contract (Art. 6(1)(b) GDPR). We do not sell or rent your data, and we do not sign you up to any newsletter without your consent.
4. Our clients and their users
When we develop, host or maintain software for a business client, we process the data of that client and its users on the client’s behalf, as a processor. The precise terms of this processing are set out in the data processing agreement offered to every client.
Our subscription software products have their own terms and privacy policies, presented at sign-up. For Stenciliner, they are available at stenciliner.com/legal.
5. Service providers and transfers abroad
We use the following providers, who only have access to data to the extent necessary for their service:
| Provider | Service | Data concerned | Country |
|---|---|---|---|
| Vercel Inc. | Hosting of the website and our applications, anonymous audience measurement | Technical connection data (IP address, logs), aggregated visit statistics | United States, with servers in several countries |
| Google (Google Workspace) | Business email and online booking | Emails exchanged with us, name and email address entered on the booking page | Ireland and United States |
| Resend, Inc. | Delivery of contact form messages | Data entered in the form | United States, sent from the European Union (Ireland) |
Where data is transferred to a country that does not offer a level of protection recognised as adequate by Switzerland or the European Union, the transfer relies on the Swiss-U.S. Data Privacy Framework or the EU-U.S. Data Privacy Framework where the provider is certified, or otherwise on the European Commission’s standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).
If a client project requires an additional provider, for example an artificial intelligence service, we inform the client before using it.
6. Retention period
- Technical connection data: as long as needed to run and secure the website, according to the periods applied by our hosting provider.
- Enquiries with no follow-up: no more than two years after the last contact.
- Clients: for the duration of the relationship, then ten years for accounting and contractual records, as required by the Swiss Code of Obligations (Art. 958f CO).
7. Security
The website and our applications are served exclusively over an encrypted connection (HTTPS). Access to data is limited to the partners and providers who need it, with protected accounts. No measure offers absolute security, but we fix any vulnerability brought to our attention without delay.
8. Your rights
You may ask us at any time:
- what data we hold about you, and obtain a copy (right of access);
- to correct it if it is inaccurate;
- to erase it, unless the law requires us to keep it;
- to receive it in a common format so you can pass it on to another provider;
- to restrict its use or object to it.
Write to guillaume@bdgstudio.com. We reply within 30 days. We may ask you to prove your identity before disclosing any data.
If you believe your rights are not being respected, you may contact the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, if you live in the European Union, the data protection authority of your country.
9. Changes
We may update this policy, for example when a new provider is added. The version in force is always the one published on this page, with its date.