Privacy policy
Version 1.0 · Effective 13 October 2026 · zerowaste-studio.com
This policy explains what personal data Zero Waste Studio collects through the Site and when handling enquiries and projects, why we use it, and the rights you have. It is issued under Regulation (EU) 2016/679 (the “GDPR”) and the French Data Protection Act (Loi Informatique et Libertés), which apply because we offer our services to businesses in the European Union.
1. Who is responsible
Controller: Zero Waste Studio (Pvt) Limited, Bungalow C-90, KDA Scheme No. 1, Karsaz Road, Karachi East, Pakistan (SECP CUIN 0189066).
Representative in the European Union (Article 27 GDPR): SUNBERG SAS, 5 rue Étienne Marcel, 75001 Paris, France. For contracts and invoicing with clients in Europe, SUNBERG SAS processes the data it needs as a separate controller, for its own contractual and accounting obligations.
All data protection requests: contact@zerowaste-studio.com, or by post to our EU representative, SUNBERG SAS, 5 rue Étienne Marcel, 75001 Paris, France.
2. Personal data we collect
2.1 Through the enquiry form: name, brand, email address, website or Instagram account, way of working, products and quantities, target delivery date, and your message.
2.2 Through our exchanges: emails, calls and meeting notes, and the project documents you share once an NDA is signed (such as tech packs, patterns and designs), which may include the names and contact details of your team.
2.3 Automatically: the Site sets no cookies and uses no analytics or advertising trackers. It stores your language choice (English or French) in your browser’s local storage; this stays on your device and is not sent to us. Our host records technical server logs (IP address, date and time, pages requested) to keep the Site secure.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry and preparing a quotation | Form and correspondence data | Steps taken at your request before a contract (Art. 6(1)(b)) |
| Development, sampling, production and delivery | Correspondence and project data | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and customs | Contact and order data | Legal obligation (Art. 6(1)(c)) |
| Occasional news about our services to professional contacts | Business contact data | Legitimate interest (Art. 6(1)(f)); you can object at any time |
| Site security | Server logs | Legitimate interest (Art. 6(1)(f)) |
| Establishing or defending legal claims | Relevant data | Legitimate interest (Art. 6(1)(f)) |
4. Who receives your data
- Our teams in Pakistan and Paris who handle your enquiry or project.
- SUNBERG SAS in Paris, for contracts, invoicing and as a point of contact for clients in Europe.
- Service providers acting on our instructions: our website host and form service Cloudflare, Inc., our email sending service Resend and our email provider Titan (supplied through Hostinger).
- Carriers and customs brokers, for shipments.
- Professional advisers and public authorities, where required by law.
We never sell personal data. Your designs and files are covered by the NDA and are never shown to or used for another brand.
5. Transfers outside the European Economic Area
The studio is based in Pakistan, which is not covered by an adequacy decision of the European Commission. Data you send through the Site is received by the studio. When SUNBERG SAS in Paris passes enquiry or project data to the studio, and when we use service providers outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards.
6. How long we keep data
| Data | Retention |
|---|---|
| Enquiries that do not lead to a project | 3 years from our last contact |
| Client and project data | Duration of the relationship, then 5 years |
| Invoices and accounting records | 10 years (French accounting law), kept by SUNBERG SAS |
| Designs and files shared under NDA | Term of the NDA, then deleted or returned, unless needed for a legal claim |
| Server logs | Period set by the host, at most 12 months |
7. Your rights
You may ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You may also set instructions for your data after your death, as provided by French law. Write to contact@zerowaste-studio.com; we reply within one month, which may be extended by two months for complex requests, in which case we will tell you within the first month.
You may lodge a complaint with the data protection authority of the country where you live or work. In France: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
8. Security
Access to your data is limited to the people who need it for your enquiry or project. The Site is served over an encrypted connection (HTTPS), and project files shared under NDA are stored with restricted access.
9. Changes
We may update this policy. The current version, with its version number and effective date, is always available on the Site.
10. Contact
contact@zerowaste-studio.com · EU representative: SUNBERG SAS, 5 rue Étienne Marcel, 75001 Paris, France