Legal
Privacy policy
Effective 8 October 2026
Studio Lab collects as little personal data as possible. This page explains what is collected, why, and what you can ask for.
Who is responsible
Studio Lab, run by Prashant Chauhan, Malta, is the controller of the personal data described here. Contact: prashant@studiolab.digital or +356 9907 5144.
This website
studiolab.digital sets no cookies, runs no analytics and loads no advertising or tracking pixels. There are no forms on the site.
The site is hosted by Vercel. Like any web host, Vercel briefly records technical request data such as IP address, browser and time of visit to keep the service running and secure. Studio Lab does not use this data to identify visitors.
When you get in touch
If you message Studio Lab on WhatsApp, by email, by phone or on social media, Studio Lab receives what you send: usually your name, contact details, business name and the details of your request.
This is used only to reply, prepare a quote and, if you go ahead, deliver the work. It is never sold or shared for anyone else's marketing.
When you are a client
To deliver content, ads, websites, apps or automations, Studio Lab may handle:
- contact and billing details for invoices,
- access you grant to accounts such as Meta, Google, Shopify or your website, used only for the agreed work,
- photos, videos, text and product information you provide,
- campaign and website results needed to report on and improve the work.
Where the work involves your own customers' data (for example website orders or ad leads), you remain the controller of that data and Studio Lab handles it on your instructions.
Legal basis
Under the GDPR, Studio Lab relies on: taking steps you ask for before a contract and performing the contract (enquiries and client work), legal obligations (accounting and tax records), and legitimate interests (keeping the website secure and showing finished work in a portfolio, unless you ask not to be shown).
Services that process data for Studio Lab
Studio Lab uses trusted providers to run its business. Depending on the work, these include Vercel (hosting), Google Workspace (email and files), Meta (WhatsApp, Facebook and Instagram), Supabase (databases for client apps) and AI providers such as Anthropic or OpenAI for drafting and automation.
Some of these providers are based outside the EU. Where data leaves the EU, it is protected by the European Commission's standard contractual clauses or an adequacy decision such as the EU-US Data Privacy Framework.
How long data is kept
Enquiries that do not lead to work are deleted within 12 months. Client records are kept for as long as the work continues, and invoices and accounting records for as long as Maltese law requires (currently up to 10 years). Account access is removed when a project ends.
Your rights
You can ask to see, correct or delete your personal data, to restrict or object to its use, or to receive it in a portable format. Write to prashant@studiolab.digital. Studio Lab replies within one month.
You can also complain to the Information and Data Protection Commissioner in Malta (idpc.org.mt).
Tools with their own policy
Studio Lab's apps have separate privacy policies: Prompter at studiolab.digital/prompter/privacy, and AD GURU at adguru.studiolab.digital/privacy.
Changes
If this policy changes, the new version is posted on this page with a new effective date.