Privacy Policy

1. Who runs Studio Niza

Studio Niza is operated by Niza Ravelo, based in the Philippines. The studio is a sole-proprietorship growth studio offering Shopify SEO, content writing, AI chatbots, and reviews management services to clients worldwide.

For any privacy-related question, opt-out request, or data deletion request, contact privacy@studioniza.com. Responses go out within 48 business-day hours, Philippine time (UTC+8).

2. What data the studio collects

Studio Niza collects two kinds of data: data you give the studio directly, and data the studio receives automatically when you visit the website.

Data you give directly

If you fill out a Tally intake form or email the studio, the following may be collected:

• Your name
• Your email address
• Your Shopify store URL
• The service you are interested in and any notes you provide about your store, goals, or budget
• Any follow-up correspondence (email replies, Loom recordings of recommendations)

This data is only used to respond to your inquiry and, if you become a client, to deliver the service you contracted for.

Data collected automatically when you visit the site

When you visit studioniza.com, the following may be collected:

• Your IP address (used for general location, fraud detection, and Cloudflare security)
• Browser type, operating system, device type, and screen size
• Pages you visited, time spent on each, and the order you visited them in
• The referring site or search engine that sent you
• Mouse movements, scroll depth, and click patterns (via Microsoft Clarity, see Section 4)
• Aggregated pageview, session, and engagement metrics (via Google Analytics 4, see Section 4)

The studio does not collect or store credit card information, government ID numbers, health data, or any other category of sensitive personal information. Payments are processed by PayPal Business and Wise, both of which handle their own data collection under their own privacy policies.

3. Why the studio collects this data

The studio collects data for four reasons, and only these four:

• To respond to inquiries. If you fill out a Tally form, the studio needs your email and notes to reply with a recommendation.
• To deliver contracted services. If you become a client, the studio uses your store data to perform the SEO, content, chatbot, or reviews work you signed up for.
• To improve the website. Analytics data shows which pages help visitors and which lose them. This data informs site improvements, not advertising.
• To meet legal obligations. Some data (invoices, contracts) must be retained for tax and accounting purposes under Philippine and international law.

The studio does not sell your data to anyone. The studio does not share your data with advertisers, marketing platforms, or third-party brokers. There is no advertising network on this site.

4. Website analytics

This site uses two analytics tools to understand how visitors use the website: Microsoft Clarity (for behavior recordings and heatmaps) and Google Analytics 4 (for aggregate traffic and engagement metrics). Both tools respect your consent choice. If you decline analytics in the cookie banner, neither tool will track you beyond the technical minimum needed to deliver the page.

Microsoft Clarity

Clarity records anonymized session recordings, heatmaps, and behavior signals (like dead clicks and scroll depth). The data is used to improve site usability.

What Clarity records:

• Mouse movements, clicks, and scroll behavior
• Which pages you visit and how long you stay
• Your device, browser, operating system, and approximate country
• Anonymized session recordings showing how you navigated the page

What Clarity does not record:

• Passwords, credit card details, or anything typed into form input fields (these are masked by default)
• Your name or email (unless you submit a form, in which case the form itself collects it, not Clarity)
• Personally identifiable information beyond what is needed for session reconstruction

Clarity is operated by Microsoft Corporation. Their privacy notice is available at privacy.microsoft.com.

Google Analytics 4

Google Analytics 4 (GA4) collects aggregate traffic data so the studio can understand which pages, journal articles, and services are useful to visitors. It is configured with Google Consent Mode v2, which means it respects your consent choice from the cookie banner.

What GA4 records when you accept analytics:

• Page views, session duration, and engagement events (scrolls, clicks on outbound links, file downloads)
• Your approximate location (city or region, never your precise address)
• Device type, browser, operating system, and screen size
• The referring site or search query (when available) that brought you here
• A random identifier stored in a first-party cookie so the studio can tell a returning visitor from a new one

What GA4 does not record:

• Your name, email, IP address (IP addresses are anonymized by GA4 before storage), or any data you type into forms
• Advertising or remarketing data. The studio has disabled all advertising features in GA4. ad_storage, ad_user_data, and ad_personalization are set to denied permanently, regardless of your consent choice.
• Data shared with Google Ads, Google Signals, or any advertising network

If you decline analytics in the cookie banner, GA4 still sends "cookieless pings" with no identifiers attached, which allow the studio to see aggregate visit counts but cannot be linked to you across sessions. This is a feature of Consent Mode v2 designed to balance analytics needs with strict privacy.

GA4 is operated by Google LLC. Their privacy policy is available at policies.google.com/privacy. To opt out of GA4 across all websites, you can install the Google Analytics Opt-out Browser Add-on.

Opting out

To opt out of analytics on this site at any time:

• Click the Cookie settings link at the bottom of any page, toggle Analytics off, and save.
• Or email privacy@studioniza.com and the studio will exclude your IP from future Clarity tracking.

5. Cookies and similar technologies

This site uses two categories of cookies:

• Strictly necessary cookies. These keep the site working. Cloudflare uses them for security and bot detection. The site also stores your cookie consent choice in a first-party cookie called studioniza_consent so you do not see the banner on every page. These cannot be turned off without making the site unusable.
• Analytics cookies. Microsoft Clarity and Google Analytics 4 set cookies to track sessions across page loads when you accept analytics. You can decline these in the cookie banner shown on your first visit, change your choice anytime via the Cookie settings link in the footer, or clear them through your browser settings.

Your consent choice is stored in the studioniza_consent cookie for 12 months. After that, the banner will reappear so you can renew or change your choice.

The studio does not use advertising cookies, social media tracking pixels, retargeting cookies, or any other marketing technology on this site.

6. Third-party services used

The studio uses a small number of third-party tools to run the business. Each one has its own privacy policy. Data may flow to these providers as part of normal site operation:

Service	What it does	Data shared
Cloudflare Pages	Hosts the website and provides security	IP address, browser info, request data
Microsoft Clarity	Website analytics and session recordings	Anonymized behavior data, device info
Google Analytics 4	Aggregate traffic and engagement analytics	Anonymized pageview and event data (analytics consent required)
Google Tag Manager (gtag.js)	Loads the GA4 script and applies consent mode	No personal data; loads on every page
Tally	Intake forms on Contact and service pages	Form submissions you choose to send
Zoho Mail	Email correspondence	Emails you send to the studio
Google Search Console & Bing Webmaster Tools	Search performance monitoring	Aggregate search query data, no personal info
PayPal Business & Wise	Payment processing for paying clients	Billing info, only for paying clients

The studio does not use Facebook Pixel, Hotjar, retargeting platforms, advertising networks, or email marketing automation tools on this site as of the policy date above.

7. How long data is kept

• Tally form submissions: kept indefinitely in the studio's intake system, unless you request deletion.
• Email correspondence: kept in Zoho Mail for as long as the email relationship is active, with reasonable retention afterward for tax, audit, or dispute reasons.
• Microsoft Clarity data: retained for 13 months by default (Clarity's standard retention), then automatically purged.
• Google Analytics 4 data: retained for 14 months by default (GA4's standard retention for user-level data), then automatically purged. Aggregate reports remain available indefinitely with no user-level detail.
• Cookie consent choice: stored in the studioniza_consent cookie for 12 months, then renewed via the banner.
• Client contracts and invoices: retained for the period required by Philippine tax law (typically 10 years), even after the client relationship ends.
• Anonymous analytics aggregates: kept indefinitely. These contain no personal information.

8. Your rights

You have the following rights regarding your data. The studio honors these regardless of where you live, even if your local law does not require it:

• Right to access: ask what data the studio has about you, and receive a copy.
• Right to correction: ask the studio to fix any inaccurate data.
• Right to deletion: ask the studio to delete your data. Exceptions apply for legal-retention data like invoices.
• Right to opt out: ask the studio to stop collecting analytics data about you, or stop sending you any future correspondence.
• Right to portability: receive your data in a machine-readable format.
• Right to object: object to any processing of your data, including legitimate-interest analytics.

To exercise any of these rights, email privacy@studioniza.com. The studio will respond within 30 days, usually much sooner. There is no fee for these requests.

9. International visitors and applicable law

Studio Niza is based in the Philippines and operates under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Visitors from outside the Philippines are also covered by the protections in this policy.

If you are visiting from the European Union, the United Kingdom, or Switzerland, your data is also protected under the General Data Protection Regulation (GDPR) and equivalent UK and Swiss laws. You can lodge a complaint with your local data protection authority if you believe the studio has mishandled your data.

If you are visiting from California, the United States, you have additional rights under the California Consumer Privacy Act (CCPA). You can exercise those rights by emailing privacy@studioniza.com.

10. Children

The studio does not knowingly collect data from anyone under 18. The services Studio Niza offers are for business owners running Shopify stores, which is an adult activity. If you believe a child has submitted data to the studio, email privacy@studioniza.com and it will be deleted immediately.

11. Security

The studio uses reasonable technical and organizational measures to protect your data:

• HTTPS encryption on every page of the website
• Strong, unique passwords on every business account, with two-factor authentication where supported
• Limited data collection by design (the studio collects only what it needs)
• Reputable third-party providers (Cloudflare, Microsoft, Google, Zoho, Tally) that maintain their own security standards

No system is perfectly secure. If a data breach affects you, the studio will notify you within 72 hours of becoming aware of it, as required by both the Philippine Data Privacy Act and GDPR.

12. Changes to this policy

If the studio adds new tools, changes how data is handled, or updates legal obligations, this policy will be updated. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be announced at the top of the homepage for at least 30 days.

This policy is in version control alongside the rest of the website. Older versions are preserved in the studio's repository if you want to see what changed.

13. Contact

For any question about this policy, or to exercise any of your rights described above: