Privacy Policy
How personal data is collected, used and protected when you visit this portfolio, contact the studio or subscribe to updates.
Last updated: 30 October 2025 · Data controller: Luis Koepke / Studio Karma · Contact: legal@luiskoepke.com
Only the minimum amount of information necessary is collected: mainly technical data to keep the site secure and the contact details you choose to share. This information is used to respond to you, organize projects and maintain a solid, relevant client base—never to resell your data.
1. Who is responsible for your data?
The data controller for this website is Luis Koepke / Studio Karma, based in Medellín, Antioquia, Colombia. For any questions about privacy or data protection, you can write to legal@luiskoepke.com.
2. Categories of data collected
Depending on how you interact with the website, the following types of data may be processed:
a) Technical and usage data
- IP address and approximate region.
- Device type, browser family and operating system.
- Pages visited, time spent and navigation paths.
- Basic events such as clicks or form submissions.
b) Contact and project data
- Name, email address and any social or company information you provide.
- Project details, goals, budget, timeline and references you choose to share.
- Attachments or links that you voluntarily include in your message.
c) Mailing list data
- Name, email and basic context (for example, “client”, “collaborator”, “interested in services”).
- Optional metadata such as company, role, country or tags used to keep the list organized.
- Email engagement information (opens, link clicks) at an aggregate level.
d) Portfolio-related data
Information about projects, brands and agencies is processed in order to document and display professional experience. This concerns the work itself (for example, design decisions, case studies) and does not give the studio ownership over the underlying brands or products.
3. How this data is collected
- Directly from you when you fill in a form, send an email or subscribe to a mailing list.
- Automatically through the hosting environment, Cloudflare and Google Analytics when you browse the site.
- From public sources when referencing brands or projects that are already publicly visible and which form part of the portfolio.
4. Purposes for processing your data
Your data is used only for clear, limited purposes:
- To operate, secure and improve the portfolio website.
- To respond to inquiries and discuss potential collaborations.
- To prepare proposals, contracts or creative directions.
- To build and maintain a curated network of clients and collaborators.
- To send occasional updates about new services, case studies or resources when you have requested or accepted such communication (e.g. via Mailchimp).
5. Legal bases for processing
Depending on your location and the context, your data may be processed on the basis of one or more of the following:
- Legitimate interest in running a professional portfolio, maintaining client relationships and securing the website.
- Pre-contractual steps at your request, such as preparing a proposal or answering questions about a project.
- Consent for optional analytics, cookies or mailing-list subscriptions, where required by law.
6. How long data is kept
Data is kept only for as long as it is reasonably needed for the purposes described above:
- Server and security logs are retained for a limited time for diagnostics and security.
- Project and contact emails are kept as long as the relationship may remain relevant.
- Mailing-list data is kept until you unsubscribe or request deletion.
- Portfolio case studies may remain published for longer periods, as they document the designer’s body of work, but can be reviewed if a client has justified concerns.
7. Sharing of data with service providers
Personal data is shared only with providers that are necessary to operate this website and communication channels, including:
- Hostinger for hosting and email.
- WordPress + Elementor for the CMS and form handling.
- Cloudflare for CDN, security and Turnstile CAPTCHA.
- Google Analytics for usage statistics.
- Mailchimp for managing mailing lists and sending emails.
These providers process data only on behalf of the studio and according to their own terms and privacy policies. Personal data is not sold to third parties for their independent marketing.
8. International transfers
Because services such as Hostinger, Cloudflare, Google and Mailchimp operate globally, your data may be stored or processed in countries outside your own jurisdiction. Where applicable, these providers rely on contractual safeguards and standard data protection mechanisms to protect your data.
9. Your rights
Depending on your jurisdiction, you may have rights such as:
- Access to the personal data held about you.
- Correction of inaccurate or incomplete data.
- Deletion of your data where no longer necessary or where you withdraw consent.
- Restriction or objection to certain types of processing.
- Portability of data you have provided in a structured format.
To exercise these rights, contact legal@luiskoepke.com. Requests will be handled with care and in line with applicable law.
10. Emails, Mailchimp and tracking
When emails are sent via Mailchimp, basic analytics may be collected (such as whether an email was opened or a link was clicked). This helps understand what content is relevant and to avoid sending noise. You can unsubscribe from any mailing list at any time using the link in the footer of each email or by contacting the studio directly.
11. Portfolio, client work and logos
Showing real work is essential to demonstrate skills and experience. At the same time, the studio respects that the underlying brands and projects belong to the companies and agencies involved.
- Work is presented for reference and storytelling only. It does not change the ownership of any intellectual property belonging to clients or employers.
- If you represent a brand featured here and have concerns about the way a project is presented, you can contact legal@luiskoepke.com to request adjustments.
12. Changes to this Privacy Policy
This Policy may be updated from time to time to reflect changes in technology, services or legal requirements. Significant updates will be reflected with an updated “Last updated” date at the top.
This Privacy Policy is intended to be transparent and understandable. It is not a substitute for formal legal advice. If you or your organization have strict compliance obligations, please review this document with your legal counsel.