Privacy Policy

Last updated: 16 June 2026

This Privacy Policy explains how z creative labs GmbH (operating publicly as noteworthy studio) ("we", "us", "our") collects, uses, and protects personal data when you visit noteworthy.graphics (the "Site"). We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for processing your personal data is:

z creative labs GmbH (noteworthy studio) Sihlquai 131, 8005 Zürich, Switzerland UID: CHE-466.059.552 Email: hello@noteworthy.studio

2. What Personal Data We Collect

Depending on how you interact with the Site, we may process:

• Server log data. When you visit the Site, our servers and infrastructure providers may automatically record technical information such as your IP address, browser type and version, operating system, referring page, pages visited, and the date and time of access.
• Analytics data. We use a simple, privacy-friendly first-party analytics pixel (loaded from api.noteworthy.graphics) to count visits and understand aggregate traffic patterns. This may involve processing your IP address and request metadata on our own infrastructure; we do not use it to build advertising profiles or track you across other websites.
• Newsletter data. If you subscribe to our newsletter, we collect your email address in order to send it to you.
• Contact data. If you email us or contact us via social media, we receive the information you choose to share, such as your name, email address or handle, and the content of your message.

We do not intentionally collect special categories of sensitive personal data through the Site, and we ask that you do not send such data to us.

3. Cookies and Similar Technologies

The Site is designed to work without tracking cookies. Our analytics rely on a first-party pixel rather than cookies, so we do not currently set non-essential cookies and do not display a cookie consent banner. Any strictly necessary cookies used to operate the Site are exempt from consent requirements. If we introduce cookies or third-party trackers that require consent in the future, we will update this policy and request your consent where the law requires it. You can also control cookies through your browser settings.

4. Purposes and Legal Bases

We process personal data for the following purposes, on the legal bases indicated (citing the GDPR where applicable):

• Operating, securing, and maintaining the Site — legitimate interest (Art. 6(1)(f)).
• Understanding and improving how the Site is used (privacy-friendly, cookieless analytics) — legitimate interest (Art. 6(1)(f)).
• Sending our newsletter to subscribers — consent (Art. 6(1)(a)).
• Responding to your enquiries — legitimate interest, or performance of pre-contractual steps (Art. 6(1)(b)/(f)).
• Complying with legal obligations — legal obligation (Art. 6(1)(c)).

Under the revFADP, we process personal data on the basis of overriding legitimate interests, consent, or legal obligation as relevant to each purpose above.

5. Newsletter

If you subscribe to our newsletter, we collect your email address for the sole purpose of sending you the newsletter. We use a double opt-in process: after you sign up, we send a confirmation email, and we only add you to our list once you click the confirmation link. This verifies your subscription and helps prevent misuse of your address.

We send the newsletter on the basis of your consent (GDPR Art. 6(1)(a)) and in line with applicable Swiss anti-spam rules. You can withdraw your consent and unsubscribe at any time, free of charge, using the unsubscribe link in every newsletter or by emailing hello@noteworthy.studio. Withdrawing consent does not affect the lawfulness of any newsletter sent before you unsubscribed.

We use Resend (Resend, Inc., United States) as our email delivery provider to manage subscriptions and send the newsletter on our behalf; see the sections on data sharing and international transfers below. We keep your email address for as long as you remain subscribed and remove it from our active list after you unsubscribe.

6. How We Share Data

We do not sell your personal data. We may share it with:

• Service providers (processors) who help us operate the Site, acting on our instructions under appropriate data-processing agreements. These currently include Netlify (website hosting), Google (email via Google Workspace / Gmail), and Resend (newsletter delivery).
• Third-party platforms you choose to interact with (for example, if you contact us via a social network, that platform processes your data under its own policy).
• Authorities or third parties where required by law or to protect our legal rights.

7. International Transfers

Some of our service providers are based in the United States (including Netlify, Google, and Resend) and may process personal data there. Where we transfer personal data to a country without an adequate level of protection, we rely on appropriate safeguards, such as the EU-US and Swiss-US Data Privacy Framework (where the provider is certified) or Standard Contractual Clauses together with any additional measures required.

8. Retention

We keep personal data only as long as necessary for the purposes described above or as required by law. Server logs and analytics data are retained for a limited period and then deleted or anonymized; newsletter subscription data (your email address) is kept until you unsubscribe; and correspondence is kept as long as needed to handle your enquiry and to meet any record-keeping obligations.

9. Your Rights

Subject to applicable law, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of, or object to, certain processing;
• request data portability (under the GDPR and revFADP, where applicable); and
• withdraw any consent you have given, without affecting prior processing.

To exercise these rights, contact us at hello@noteworthy.studio. We may need to verify your identity before responding.

If you believe we have processed your data unlawfully, you may lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU/EEA, you may contact your local data protection authority.

10. Data Security

We take reasonable technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. However, no transmission over the internet can be guaranteed to be completely secure.

11. Children

The Site is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always the one published on this page, with the "Last updated" date above. Material changes will take effect when posted.

13. Contact

For any questions about this Privacy Policy or how we handle your personal data, contact us at hello@noteworthy.studio.