PISHI STUDIO
Privacy Policy & Data Sovereignty
Effective Date: August 5, 2026
Last Updated: August 5, 2026
Data Controller: Mina Davoudi, Pishi Studio
Overview & Digital Architecture Privacy
Pishi Studio (“we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and data sovereignty of our clients. As a strategic digital architecture practice, we believe in structural transparency. This policy outlines how we manage personal and business data to maintain high standards of GDPR compliance within our digital infrastructure.
Information We Collect
- Consultation Inquiries: Name, email address, and business details provided during the inquiry phase.
- Engagement Data: Strategic documentation, business materials, and infrastructure information required for architectural analysis and design.
- Technical Logs: Limited technical metadata required to maintain the security, functionality, and integrity of our digital environment.
Legal Basis for Data Processing
Under the standards established by the General Data Protection Regulation (GDPR), Pishi Studio processes personal data only where an appropriate legal basis applies. This may include:
- Processing necessary to respond to an inquiry, provide a strategic consultation, or perform a contract.
- Processing required for Pishi Studio’s legitimate interests, including maintaining secure and effective digital architecture, preventing misuse, and managing business operations.
- Processing based on your explicit consent, including consent to receive relevant communications where required.
Data Sovereignty & Security
Pishi Studio operates a lean and carefully selected digital infrastructure. We prioritize data sovereignty by selecting third-party providers that maintain appropriate security, privacy, and international data-transfer safeguards.
Where personal data is transferred or processed by external service providers, we seek to ensure that suitable safeguards are in place in accordance with applicable data-protection requirements and guidance issued by the European Data Protection Board (EDPB).
Pishi Studio does not sell, rent, or trade personal data.
Data Retention
- Respond to inquiries and manage prospective engagements;
- Deliver contracted strategic services;
- Maintain necessary project, financial, legal, or operational records; and
- Meet applicable regulatory obligations.
Your Rights
- Request access to personal data held about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of your personal data;
- Object to, or request restriction of, certain processing activities;
- Withdraw consent where processing is based on consent; and
- Request data portability where applicable.
To exercise these rights or ask a question about how your information is handled, contact Pishi Studio at hello@pishi.studio.