Privacy Policy

1. Who we are

Urbino is operated by Haydn Morris Digital, registered in the Netherlands (KvK: 96617055). We provide a studio management platform for creative studios and their members.

If you have any questions about how we handle your data, you can reach us at haydn@urbino.studio.

2. What data we collect

We collect the following categories of personal data:

• Account information — your name and email address when you register.
• Profile information — any additional details you add to your artisan profile (bio, profile photo, etc.).
• Transaction data — records of class bookings, course enrolments, product purchases, and memberships processed through our platform.
• Payment data — payments are processed by Stripe. We do not store full card details; Stripe handles payment security on our behalf.
• Usage data — information about how you use the platform, including page views and feature interactions, collected via PostHog analytics.
• Communication data — emails we send you (booking confirmations, receipts, account notifications).

3. Why we collect it

We process your personal data on the following legal bases:

• Contract performance — to provide you with access to the platform and fulfil bookings and purchases you make.
• Legitimate interests — to improve the platform, understand how it is used, and prevent fraud.
• Legal obligation — to comply with applicable tax and accounting requirements.

4. Where your data is stored

All personal data is stored within the European Union. Our database infrastructure is hosted on Neon (PostgreSQL), with servers located in the EU. Payment processing is handled by Stripe, which is also compliant with EU data protection requirements.

5. Who we share your data with

We share your data only with the following third parties, to the extent necessary to provide our services:

• Stripe — payment processing
• Neon — database hosting (EU)
• PostHog — product analytics and session replay
• Resend — transactional email delivery
• Netlify — platform hosting

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

6. How long we keep your data

We keep your account data for as long as your account is active. Transaction records are kept for seven years to comply with Dutch accounting and tax obligations. If you ask us to delete your account, we will erase your personal data within 30 days, except where we are required to retain it by law.

7. Your rights

Under the GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (subject to legal retention requirements).
• Restriction — ask us to restrict processing of your data.
• Portability — receive your data in a portable format.
• Objection — object to processing based on our legitimate interests.

To exercise any of these rights, email us at haydn@urbino.studio. We will respond within one month. You also have the right to lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Cookies

We use a session cookie to keep you logged in, and analytics cookies via PostHog to understand how the platform is used. PostHog session replay may capture anonymised interactions with the platform. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy from time to time. We'll notify you of significant changes by email. The date at the top of this page shows when it was last revised.