This policy explains what we store on, or read from, your device when you use sujanstudio.com, and how you control it. It applies to visitors in Finland and the European Economic Area.
The rule we work to is simple: nothing that is not strictly necessary to provide the service you asked for is stored on your device until you have said yes. That comes from the EU ePrivacy rules as implemented in Finland in the Act on Electronic Communications Services, supervised by Traficom, together with the consent standard in the GDPR. Where storage involves personal data, our Privacy Policy explains what we then do with it.
1. Scope
"Cookies" is the familiar word, but the rules cover any storing of information on, or gaining of access to information already stored on, your device. That includes cookies, local storage, session storage and similar techniques. This policy uses "cookies" as shorthand for all of them, and the table in section 4 lists local storage entries alongside cookies rather than quietly leaving them out.
2. Consent: what we ask, and when
When you first visit, nothing beyond what is strictly necessary is stored. Analytics and any measurement of how you use the site are held off until you make a choice.
- It is a real choice. Accepting and rejecting are offered with equal prominence. There is no pre-ticked box, and closing or ignoring the banner is not consent.
- It is specific. You can accept one category and refuse another rather than being asked to take everything or nothing.
- It is informed. The banner names the categories and links to this page, which names each individual item, its purpose and its lifetime.
- It comes first. Non-essential storage happens after you consent, not before, and not while the banner is still on screen.
- It is as easy to withdraw as to give. Withdrawal takes the same number of clicks from the same place as consent did.
Refusing non-essential cookies does not restrict your access to the site. Nothing on sujanstudio.com is withheld because you said no.
3. Categories we use
3.1. Strictly necessary
Storage without which the service you asked for cannot be delivered — including the record of the cookie choice you made, which we have to keep in order to honour it. These are set without consent, because the law exempts them, and they are not used for analytics or advertising.
3.2. Analytics and performance
Storage that lets us count visits and see where people get stuck in the quote form, so we can fix it. Set only with your consent. We do not send your name, phone number, exact event address or exact event date to our analytics tool: enquiries are recorded at the level of suburb or city and month.
3.3. Marketing attribution
Storage that records how you arrived at the site — which channel, any referral code, which link you clicked, and which pages you read before enquiring — so that we can tell which of our own activity works. Set only with your consent.
3.4. Maps and address lookup
Our maps and the address suggestions in the quote form are provided by Google. Loading them lets Google store and read its own identifiers on your device and receive your IP address and the address text you type. Set only with your consent. If you refuse, the maps do not load and you can type the address in full instead — nothing is withheld from you.
3.5. Advertising
We do not currently run any advertising or third-party advertising cookies on the European version of this site. There is no advertising category to consent to, because there is nothing in it. If that changes, this page and the banner will list each provider before anything is set.
4. Everything we actually store
This is the complete list, not a representative sample. If you find something stored by this site that is not listed here, tell us — that is a defect and we want to know about it.
| Cookie Name | Provider | Purpose | Duration | Link to Policy |
|---|---|---|---|---|
| Your cookie choice | Sujan Studio | Strictly necessary. Records whether you accepted or refused each category, so your choice can be honoured on later visits and you are not asked again on every page. Stored whichever way you answer, because it is the answer. PostHog's opt-out key is used for the analytics part of that record. | 12 months | Sujan Studio |
| pwa-install-dismissed | Sujan Studio | Strictly necessary. Local storage. Remembers that you dismissed the prompt to install the site as an app, so it is not shown to you again. | Until you clear your browser storage | Sujan Studio |
| preferred-locale | Sujan Studio | Strictly necessary. Local storage. Remembers which country and language version of the site you chose, so we stop suggesting a different one. | Until you clear your browser storage | Sujan Studio |
| sujan:location | Sujan Studio | Strictly necessary. Session storage. Holds the location you asked us to use — either the one your browser shared with your permission, or the place you picked — so local results stay put as you move between pages. Never stored unless you allow it, and discarded when you close the tab. | Until you close the browser tab | Sujan Studio |
| PostHog analytics | PostHog | Analytics, consent required. Distinguishes one visitor from another and links the steps of a single visit, so we can measure how the quote form performs and where people get stuck. Stored only after you accept analytics. PostHog's own keys are named after our project and begin "ph_". | 12 months | PostHog |
| campaign_tracking_data | Sujan Studio | Marketing attribution, consent required. Local storage. Records which channel you came from, any referral code, the time, and the page URL you landed on, so an enquiry can be credited to the right activity. | 30 days | Sujan Studio |
| ss:journey | Sujan Studio | Marketing attribution, consent required. Session storage. Records the pages you viewed before enquiring — page addresses and titles only, never anything you typed — and is sent to us only if you actually submit an enquiry, so we can see what someone read before getting in touch. | Until you close the browser tab | Sujan Studio |
| ss:cta | Sujan Studio | Marketing attribution, consent required. Session storage. Records which button or link you used to reach the quote form, so we can tell which parts of the site actually lead to enquiries. | Until you close the browser tab | Sujan Studio |
| Google Maps and Places | Functional, consent required. Loaded when a page shows a map or when you type into the address field. Google may store and read its own identifiers on your device, and receives your IP address and what you type into the address field. We do not control what Google stores; its own privacy notice governs it. | Set by Google | ||
| Cloudflare | Cloudflare | Strictly necessary. Our hosting and content delivery provider may set storage to route requests, keep the site available and protect it from attack and abuse. | Set by Cloudflare | Cloudflare |
Local and session storage entries are listed alongside cookies because the consent rules cover both. Nothing marked "consent required" is stored until you have accepted that category.
5. Changing your mind
You can change or withdraw your choice at any time using the "Cookie Settings" link in the footer of every page. It opens the same panel as the original banner, with the same options. Withdrawing consent stops further collection immediately; it does not undo what was collected while consent was in place, which was lawful at the time.
You can also clear or block storage in your browser settings. Doing so removes the record of your cookie choice as well, so you will be asked again on your next visit.
We ask again after 12 months so that a choice you made long ago is not treated as current forever.
6. Lawful basis and transfers
Storing and reading non-essential information on your device is done on the basis of your consent, under the national implementation of the ePrivacy Directive in Finland. Where the personal data collected through that storage is then processed by us, the lawful basis is your consent under Article 6(1)(a) of the GDPR.
Strictly necessary storage does not rely on consent; the ePrivacy exemption applies, and the associated processing rests on our legitimate interest in operating the site under Article 6(1)(f).
Sujan Studio operates from Australia, for which there is no European Commission adequacy decision. Data collected through analytics may therefore be transferred outside the EEA. Section 6 of our Privacy Policy sets out the safeguards relied on for those transfers, and states plainly what is and is not yet in place.
7. Your rights
Where storage on your device involves personal data, you have the rights described in section 7 of our Privacy Policy: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
You can complain about our use of cookies to the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi. Complaints specifically about storing information on terminal equipment may also be directed to the Finnish Transport and Communications Agency (Traficom), which supervises that part of the rules.
8. Changes and contact
We update this policy whenever what we store changes. Where a change adds a new non-essential item, we ask for your consent again before setting it rather than relying on an updated page.
Questions about this policy:
: Sujan Studio (ABN 13 680 271 434)
: 135 Pirie Street, Adelaide SA 5000, Australia
Email: support@sujanstudio.com
Phone: +61 3 6163 3896
EU representative: not yet designated. Contact us directly at support@sujanstudio.com.
For what we do with personal data once it is collected — including the lawful basis for each purpose, how long we keep it, and how it is transferred to Australia — see our Privacy Policy.