Privacy and personal data
Last updated: 30 September 2026. This notice explains how Holy Studio processes information through this website and when you contact us.
Controller and contact
The controller is Holy Studio Sp. z o.o., ul. Krępicka 1/6, 54-018 Wrocław, Poland; KRS 0000710340, NIP 8971849920. For privacy matters, email hello@holystudio.com.
What information we use and why
When you use the contact form, email or call us, we process the contact details and message or conversation you provide to reply and continue the correspondence. If your enquiry concerns a contract, we may also use information needed to enter into and perform it.
For a person enquiring about a contract, we rely on steps taken at that person’s request before entering into a contract (GDPR Article 6(1)(b)). For other enquiries, we rely on our legitimate interests in replying, managing business correspondence and protecting the website (Article 6(1)(f)). Where applicable law requires it, we also process information to comply with a legal obligation (Article 6(1)(c)).
Message dictation is optional. After you activate the microphone, the recording is sent to OpenAI to turn it into text, based on your consent (GDPR Article 6(1)(a)). Holy does not save the recording to disk; it is processed in memory during transcription. You can edit the text before sending the form. You may withdraw consent by contacting us; this does not affect the lawfulness of earlier processing. You can type your message instead.
We protect this form with Google reCAPTCHA v2 Invisible. It loads after interaction with the form and may analyse technical information, including IP address, browser and interactions, to distinguish people from bots. Google sets the _GRECAPTCHA cookie when risk analysis runs. Our basis for protecting the form is our legitimate interest in preventing spam and abuse (GDPR Article 6(1)(f)). You can email or call us directly instead of using the form.
When serving the website, the server may process technical request information such as IP address, browser information and request time. This supports delivery, diagnostics and security. Hosting is provided by Hetzner. Processing location and log deletion criteria depend on the service configuration and operational rules.
We measure visits to Holy V2 using our own Plausible Analytics instance at stats.voicedot.ai. We measure page visits, contact, phone and email clicks, use of the form and dictation, project and FAQ opens, language changes and scrolling. We do not send form field values, message contents, recordings, transcripts or security tokens to analytics. According to the provider’s policy, it does not use cookies, localStorage or persistent identifiers. For a request, the IP address and user agent are used to derive a daily identifier; the raw IP address and user agent are not stored, and the salt is deleted every 24 hours. The provider records events and session data for aggregate statistics. Our basis is our legitimate interest in understanding traffic and improving the website (GDPR Article 6(1)(f)).
Recipients and transfers
Information may be accessed by service providers needed to operate the website: Hetzner (hosting), Google Workspace (email), Mailgun (delivery of form messages) and Plausible Analytics (statistics, when enabled), to the extent required for their services; by authorised people acting for the company; and by public authorities where required by law. Mailgun sending uses the EU region. Google and Mailgun services may involve transfers outside the EEA. The transfer mechanisms under these providers’ applicable terms apply, including an adequacy decision or other appropriate safeguards such as standard contractual clauses. To ask which safeguards apply or request a copy, email hello@holystudio.com.
If you use dictation, OpenAI, our transcription provider, also receives the recording. According to its documentation, the /v1/audio/transcriptions endpoint does not use data for model training or retain it as application state or in abuse-monitoring logs. Processing may take place outside the EEA under the OpenAI data processing agreement and its transfer mechanisms, including standard contractual clauses. Links to the current provider terms are listed below.
When you use the form, reCAPTCHA security information is sent to Google. This service is governed by Google’s Privacy Policy and Terms of Service; it is separate from Google Workspace email. Google may process information outside the EEA using the transfer mechanisms described in its Privacy Policy, including adequacy decisions and standard contractual clauses.
How long we keep information
We keep correspondence while needed to handle the matter and related discussions, then for as long as needed to document the relationship or establish, exercise or defend legal claims; where a legal retention duty applies, for the period required by law. Log data is kept according to security, diagnostic and incident-handling criteria, then deleted or restricted. Information used for Plausible statistics is retained under the provider’s policy. The applicable period depends on the purpose, the end of correspondence, legal duties and any incident or claim.
Your rights
You may request access to, rectification or erasure of your information, or restriction of processing, subject to the conditions in the GDPR. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. Data portability is available in the cases set out in Article 20 GDPR, in particular for information processed by automated means on the basis of a contract or consent. You may complain to the President of the Polish Personal Data Protection Office (UODO).
To exercise your rights or ask a question, email hello@holystudio.com.
Do you have to provide information
Providing contact information is voluntary. Without enough information to reply, we may be unable to handle your enquiry or take steps before entering into a contract.
Automated decisions
This website does not make solely automated decisions about visitors that produce legal effects or similarly significantly affect them.