Legal

Privacy & Cookie Policy

Last updated: 14 October 2026

This page explains, in plain terms, what data this website collects, why, and what your rights are. We respect your privacy and collect as little data as we can.

1. Who we are

This website is owned and operated by Nefeli Tsaousi, trading as Nephele Marketing Studio (“Nephele”, “we”, “us”), Athens, Greece, Tax ID (ΑΦΜ) 171784109. Nefeli Tsaousi is the data controller for the personal data described on this page.

For anything about privacy, contact us at: hello@nephelestudio.com

2. What we collect & why

Contact form

When you fill in the contact form, you give us your name, email, optionally the service you’re interested in, and your message. We use these solely to reply to you and discuss working together.

Legal basis: responding to your request (taking steps at your request before any possible contract).

The form is delivered through a service called FormSubmit, which forwards your message to our email. See “Who we share data with” below.

Website analytics (Google Analytics & Microsoft Clarity)

We’d like to understand how the site is used (which pages are viewed, from what device, roughly which region, where people click) so we can improve it. For this we use Google Analytics 4 (via Google Tag Manager) and Microsoft Clarity, which shows anonymized heatmaps and browsing recordings.

These only load if you accept the “Analytics” category in the cookie banner. If you reject it, nothing loads and nothing is collected. Legal basis: your consent.

Ad measurement (Marketing)

If you accept the “Marketing” category in the cookie banner, the Meta Pixel (Facebook/Instagram) and the TikTok Pixel load. They count visits to the website, so that we can show ads on social media to people who have already visited it and measure how those ads perform. If you reject the category, they do not load at all. Legal basis: your consent.

Fonts (Google Fonts)

This site uses fonts loaded from Google’s servers (Google Fonts). When they load, your IP address is made available to Google in order to deliver the font. No cookies are set for this purpose.

Cookieless visitor counter (Cloudflare)

We also use Cloudflare Web Analytics, a basic visitor counter that sets no cookies and doesn’t identify you personally, so it loads unconditionally, since it doesn’t need consent under GDPR.

Language preference

We remember your language choice (Greek/English) with a functional cookie, so you always see the language you picked. On your first visit, if you haven't picked a language, the server checks which country you are connecting from (based on your IP address) and your browser's language, to show you the Greek version automatically if you are in Greece or Cyprus. The country is not stored. Your cookie choice is kept locally in your browser.

3. Cookies & similar technologies

Cookies are small files stored on your device. Here is what this site may use:

The “local” items are stored using your browser’s local storage rather than traditional cookies, but we list them here for full transparency.

4. Your consent and how to change it

On your first visit we ask separately for each category (Analytics / Marketing). You can accept everything, reject everything, or choose exactly what you're OK with via "Customize". You can change your mind at any time, just as easily, using the button below:

Cookie settings

5. Who we share data with

We never sell your data. We only share it with the providers that make this website work:

• FormSubmit: delivers your contact-form message to our email.
• Google: provides Google Analytics and Google Tag Manager (only with your consent) and the Google Fonts.
• Microsoft: provides Microsoft Clarity (only with your consent).
• Meta: provides the Meta Pixel for measuring ads on Facebook and Instagram (only with your consent).
• TikTok: provides the TikTok Pixel for measuring ads on TikTok (only with your consent).
• Cloudflare: provides a basic, cookieless visitor counter, and technical security services.
• Netlify: hosts the website; it logs basic technical connection data (e.g. IP) for security and operation, as any web server does.

Some of these providers are based outside the European Economic Area (e.g. in the USA). Where that happens, the transfer relies on the safeguards the GDPR requires (such as Standard Contractual Clauses).

6. How long we keep data

• Contact messages: for as long as we need to reply and, if we start working together, for the duration of our relationship and as the law requires.
• Analytics data: detailed visit data is kept for 2 months and visitor-level data for up to 14 months, as set in our Google Analytics settings.
• Local preferences (language, cookies): stay on your device until you clear them.

7. Your rights

Under the GDPR, you have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data deleted (“right to be forgotten”);
• restrict or object to processing;
• receive your data in a portable form;
• withdraw your consent at any time (e.g. for Analytics, via “Cookie settings”).

8. Changes to this policy

We may update this policy as the website evolves. The “Last updated” date at the top shows when it last changed.