Privacy Policy

Solun Studio designs brand identities, digital experiences and intelligent systems. To do that we collect a deliberately small amount of personal data: what we need to reply to you, to schedule a conversation, and to let you use the tools on this site.

This document is written in plain language because a policy nobody reads protects nobody. If something is unclear, tell us and we will fix the wording.

The data controller is Razieh Tavakolian, a natural person based in Florence, Italy.

For any request concerning your personal data, the reference contact is privacy@solunstudio.com.

The business does not currently hold a VAT number. This policy will be updated with full tax details as soon as they are available.

We only collect what you give us, plus the minimum technical data needed to run the site.

• Data you enter in the contact form: name, email address, company name (optional), selected brand moment and message.
• Data you enter to book a Discovery Session: name, email and the information required by the booking platform.
• Your email address, if you choose to subscribe to the newsletter.
• The content of your conversations with Iris, whether by chat or voice.
• Minimal technical data collected by our hosting provider for security and service stability.

We use your data only for the purposes you would expect when you provide it.

• Replying to requests sent through the contact form.
• Arranging and managing the appointments you book.
• Sending email communications only if you explicitly chose to receive them.
• Providing Iris’s answers and improving their quality.
• Ensuring the security, continuity and correct operation of the site.

We do not sell your data, we do not share it for advertising purposes, and we do not build commercial profiles about you.

Every processing activity rests on a specific legal ground under Article 6 GDPR.

• Consent — for the newsletter and for non-essential cookies.
• Pre-contractual measures — when you contact us or book a consultation.
• Legitimate interest — for site security and abuse prevention.
• Legal obligation — where retention is required by applicable law.

Data entered in the form is used solely to answer your request. Messages reach us by email through Resend and, as an internal notification, may be forwarded to a private Telegram channel we operate.

This data is never used for advertising, nor shared with anyone other than the technical providers listed below.

Discovery Sessions are booked through Cal.com, which acts as an independent provider. When you book, the data you enter is also processed by Cal.com under its own privacy policy.

We use this information only to arrange the meeting and to follow up on it.

Subscribing is always voluntary and requires explicit consent. Delivery is handled through Brevo.

You can unsubscribe at any time from the link at the bottom of every email, or by writing to us. Unsubscribing is immediate and requires no explanation.

Iris is the conversational assistant on this site, available in text and voice. Conversations are processed by selected artificial intelligence providers in order to generate answers.

We use conversation content to deliver the service and to improve answer quality. We do not use it for advertising profiling.

Please never enter sensitive data, credentials, identity documents or financial information in the chat. Full details are on the AI Transparency page.

To run this site we rely on specialised providers, which process data on our behalf as processors.

• Vercel — hosting and site delivery.
• Supabase — storage of content and received messages.
• Resend — transactional email delivery.
• Cal.com — booking management.
• Brevo — newsletter management.
• Artificial intelligence model providers — processing of conversations with Iris.

We keep data only as long as needed for the purposes it was collected for.

• Contact requests: up to 24 months from the last exchange, so the conversation can continue.
• Booking data: for the duration of the relationship and any period required by accounting obligations.
• Newsletter subscription: until you unsubscribe.
• Conversations with Iris: for as long as needed to operate and improve the service.

The site is served exclusively over encrypted HTTPS. The administrative area is protected by authentication, and third-party service credentials are never exposed to the browser.

No system is invulnerable: in the event of a breach posing a risk to your rights, we will act in accordance with Articles 33 and 34 GDPR.

Some providers may process data outside the European Economic Area. Where this happens, transfers rely on the safeguards set out in Chapter V GDPR, in particular the Standard Contractual Clauses approved by the European Commission.

The GDPR gives you rights you can exercise at any time, free of charge.

• Access — know what data we process and obtain a copy.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask for your data to be deleted.
• Restriction — ask for processing to be suspended.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, write to privacy@solunstudio.com. We respond within 30 days.

If you believe the processing of your data breaches the law, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live.

We would be grateful if you wrote to us first: in most cases it is something we can fix quickly.

This site currently uses only technical cookies, required for it to function. No profiling cookies are in use.

Full details, including categories we may enable in future with your consent, are in the Cookie Policy.

We may update this document to reflect legal changes or new site features. The last-updated date shown above always refers to the version in force.

If a change materially affects your rights, we will flag it visibly.