Privacy Policy

1. Introduction

1538220 B.C. LTD., publicly operating as Seto Studios and previously known as TAVU LABS ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

This policy applies to setostudios.com, our contact form, and our client services. Optional analytics are disabled until you make a choice through our analytics consent control.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name, email address, phone number, and business information
• Billing and payment information
• Project requirements and business objectives
• Communication records and correspondence
• Professional background and company details

2.2 Technical Information

Our hosting and security systems may automatically process certain technical information needed to deliver and protect the website:

• IP address, request time, requested page, and security signals
• Browser type, operating system, and device information
• Referral URL and basic server logs
• Contact-form validation and anti-abuse signals

If you accept optional analytics, Google Analytics and Microsoft Clarity may also process page views, traffic sources, device and browser information, navigation patterns, interactions, and session-level identifiers.

2.3 Business Information

For service delivery, we may collect:

• Business analytics and performance data
• Customer data necessary for marketing campaigns
• Website content and digital assets
• Third-party platform access credentials
• Marketing performance metrics

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Delivery

• Providing requested services and support
• Managing client projects and communications
• Processing payments and maintaining records
• Customizing services to meet your needs

3.2 Business Operations

• Improving our services and website functionality
• Conducting research and analytics
• Complying with legal obligations
• Protecting against fraud and security threats

3.3 Marketing and Communications

• Sending service updates and newsletters
• Promoting relevant services and content
• Conducting market research surveys
• Building case studies and testimonials (with consent)

4. Legal Basis for Processing

We process your personal information based on:

• Contract Performance: To fulfill our service agreements with you
• Legitimate Interests: To improve our services and business operations
• Consent: For marketing communications and optional data uses
• Legal Compliance: To meet regulatory and legal requirements

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers:

• Cloud hosting and data storage providers
• Payment processing companies
• Email marketing and communication platforms
• Analytics and tracking services
• Professional service providers (legal, accounting)

5.2 Business Transfers

Information may be transferred in connection with mergers, acquisitions, or asset sales. You will be notified of any such change in ownership or control.

5.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our terms of service

6. Data Security

We implement appropriate security measures to protect your information:

• Encryption in transit using HTTPS
• Access controls for systems and service providers
• Input validation, anti-abuse controls, and security headers
• Dependency maintenance and secure deployment practices
• Provider-level safeguards for hosting and email delivery

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods vary based on:

• The nature of the information collected
• Legal and regulatory requirements
• Business and operational needs
• Your preferences and consent

8. Your Rights and Choices

8.1 Access and Control

You have the right to:

• Access your personal information we hold
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to processing of your information
• Request data portability
• Withdraw consent where applicable

8.2 Marketing Communications

You can:

• Unsubscribe from marketing emails using the provided links
• Update your communication preferences
• Opt out of promotional communications
• Contact us directly to manage your preferences

9. Cookies and Tracking Technologies

We use two categories of browser storage:

• Essential storage: Used for website security, contact-form protection, and remembering your analytics preference.
• Optional analytics: Used by Google Analytics and Microsoft Clarity to measure traffic, performance, and interactions only after you accept.

Optional analytics remain off until you accept. We configure Google advertising storage and personalization signals as denied, and we send your analytics choice to Microsoft Clarity using its Consent V2 interface.

Your choice is saved in local browser storage. You can change or withdraw it at any time:

10. Third-Party Services

The website uses the following service providers:

• Vercel: Website hosting, content delivery, and operational logs.
• Google reCAPTCHA: Contact-form abuse prevention.
• Resend: Delivery of contact-form notifications and confirmations.
• Google Analytics: Optional traffic and performance analytics after consent.
• Microsoft Clarity: Optional interaction analytics and session insights after consent.

These providers process information under their own privacy terms and our service arrangements. Provider infrastructure may process data outside your country of residence.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where required, we rely on contractual, organizational, or other legally recognized safeguards for international transfers.

12. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete such information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

15. Jurisdiction-Specific Rights

California Residents (CCPA)

California residents have additional rights including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell personal information in exchange for money. Requests concerning access, correction, or deletion can be sent to the contact address above.

EU Residents (GDPR)

EU residents have rights under GDPR including:

• Right to access and data portability
• Right to rectification and erasure
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge complaints with supervisory authorities