Privacy Policy

Gavo Studios (“we”, “us”) is the data controller for the information described here. We are registered and based in Malta. Our products are sold across Europe and the United States.

For anything in this policy, contact support@gavostudios.com.

When you join the list we collect the phone number you enter, your consent to receive texts (and when you gave it), and the date and time you joined. Our hosting provider also processes limited technical data (such as your IP address) to keep the site running and secure.

To text you when Drop 01 opens, to give you early access and updates on future drops. We do not use it for anything else. Legal basis: your consent, which you can withdraw at any time (see “Your rights”).

Only the providers that make the service work, each acting as our processor (or, for payments, as an independent controller) under a data-processing agreement:

• Klaviyo — sends the SMS and stores the marketing list.
• Vercel — hosts the site and processes limited technical data (such as your IP address) to serve and secure it.
• Stripe — processes your payment if and when you buy from a drop. Card details go to Stripe directly; we never see or store your full card number.

We never sell your data, and we do not share it for anyone else’s marketing.

Klaviyo, Vercel, and Stripe may process data in the United States. Those transfers are covered by each provider’s certification under the EU–US Data Privacy Framework and, as a fallback, the EU Standard Contractual Clauses.

We keep your number for as long as you stay subscribed to the Gavo Studios SMS list, so we can give you early access and updates on this and future drops. You can withdraw your consent at any time by replying STOP or using any other unsubscribe method we offer — after that you’ll receive no further marketing messages, and we remove your number from the list.

You can ask us to access, correct, or delete your data, restrict or object to processing, withdraw consent, or receive a copy of it. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew. To stop texts, reply STOP to any message or email us. To exercise any right, contact support@gavostudios.com. We action verified requests within one month and remove your number from both our list and our SMS provider (Klaviyo). You also have the right to complain to Malta’s Information and Data Protection Commissioner (IDPC).

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

This page sets no marketing or tracking cookies. We use Vercel Analytics, which counts page views without cookies and without profiling or identifying individual visitors. If we ever add anything more intrusive, we’ll update this policy and ask for consent first.

The site is served over HTTPS with HSTS and a strict Content-Security-Policy, access to the list is restricted, and we rely on reputable providers to store your data. No method of transmission or storage is ever 100% secure, but we take reasonable measures to protect it.

The list is not directed to anyone under 16, and we do not knowingly collect their information.

If we change this policy we’ll update the date above and, for material changes, let you know.