Privacy Policy — Zero to Hero Studio

Last updated: 29 May 2026

1. Who we are

Zero to Hero Studio is a web design and digital marketing studio based in Malta. This privacy policy explains how we collect, use, and protect your personal data when you interact with us.

Data controller: Jovan Pejic, Zero to Hero Studio
Contact: hello@zerotoherostudio.com | WhatsApp: +356 9905 0236

2. What data we collect

We collect and process the following personal data:

Business contact details: name, email address, phone number, business name, and business address
Communication data: messages sent via WhatsApp, email, or SMS
Website usage: IP address, browser type, and pages visited (via server logs)
Lead information: publicly available business information from directories and social media

3. Legal basis for processing

Under the GDPR, we process your data based on:

Legitimate interest (Art. 6(1)(f)): for B2B outreach and marketing to businesses in sectors we serve
Consent (Art. 6(1)(a)): when you explicitly opt in to receive communications
Contractual necessity (Art. 6(1)(b)): when you engage our services

4. How we use your data

To contact you about our web design and digital marketing services
To create and share preview website designs for your business
To respond to enquiries and provide customer support
To improve our services and understand market needs

5. Data retention

We retain personal data for up to 2 years from last contact, or until you request deletion. If you become a client, we retain data for the duration of our working relationship plus 6 years for tax/accounting purposes.

6. Your rights

Under GDPR, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate or incomplete data
Erasure — request deletion of your data («right to be forgotten»)
Restriction — limit how we process your data
Objection — object to processing based on legitimate interest
Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at hello@zerotoherostudio.com. We will respond within 30 days.

7. Third-party services

We use the following services to store and process data:

Supabase — cloud database and storage (EU/US servers, GDPR compliant)
Netlify — website hosting and form handling
Meta (WhatsApp Business API) — messaging and communication

All third-party providers are vetted for GDPR compliance and process data under Standard Contractual Clauses (SCCs) where relevant.

8. Cookies

Our website uses no tracking cookies. We do not use Google Analytics, Facebook Pixel, or similar tracking technologies. Any cookies are strictly functional (e.g., session management).

9. Data security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and regular security reviews.

10. International transfers

Some of our service providers (Netlify, Supabase, Meta) may process data outside the EEA. Where this occurs, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Complaints

If you believe we have mishandled your personal data, you have the right to lodge a complaint with the Malta Information and Data Protection Commissioner (IDPC) at idpc.org.mt.

Questions? Reach us at hello@zerotoherostudio.com or WhatsApp +356 9905 0236.

← Back to home