GDPR Compliance Statement

1. Introduction and Commitment

Sixty Five Design (“we,” “our,” or “us”) is committed to safeguarding the privacy and data security of visitors, clients, and partners. While our primary operations and corporate infrastructure are based in the United States, we recognize the principles and rigorous standards of the General Data Protection Regulation (GDPR) (EU) 2016/679.

This comprehensive GDPR Compliance Statement outlines how we collect, use, store, and process Personal Data originating from individuals located in the European Economic Area (EEA) and the United Kingdom, ensuring alignment with European data protection rights.

2. Scope and Application

This statement applies to all personal data collected through our website ([https://sixtyfivedesign.com](https://sixtyfivedesign.com)), digital portfolios, communication channels, and associated agency services.

“Personal Data” refers to any information relating to an identified or identifiable natural person (data subject).

3. Legal Bases for Processing Personal Data

Under the GDPR, we only process personal data when we have a lawful basis to do so. Depending on the context, we process information under the following frameworks:

  • Consent: When you explicitly opt-in to communications, newsletter sign-ups, or marketing inquiries via our website forms.
  • Performance of a Contract: When processing is necessary to fulfill a service agreement, proposal, or web development/branding project requested by a client.
  • Legitimate Interests: When necessary for our business operations, such as analyzing website traffic to improve digital user experience, ensuring network security, and managing B2B client relations—provided these interests are not overridden by your fundamental rights.
  • Legal Obligation: When we are required to comply with statutory or regulatory legal requirements.

4. Data We Collect

We collect minimal personal data necessary to provide our strategic design, development, and branding services. This may include:

  • Directly Provided Information: Names, email addresses, phone numbers, company names, and project briefs submitted through our contact forms or inquiries.
  • Automatically Collected Technical Data: IP addresses, browser types, device information, operating systems, and interaction metrics gathered via cookies and analytics tools when browsing sixtyfivedesign.com.

5. Your Rights as a Data Subject

If you are located within the EEA or UK, you are granted robust rights regarding your personal data under Chapter III of the GDPR. These include:

  1. The Right to Access: You have the right to request copies of your personal data held by us.
  2. The Right to Rectification: You can request that we correct any inaccurate or incomplete information.
  3. The Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data where there is no compelling reason for its continued retention.
  4. The Right to Restrict Processing: You have the right to request the limitation of how we use your data under specific conditions.
  5. The Right to Data Portability: You can request that we transfer your collected data to another organization or directly to you in a structured, commonly used format.
  6. The Right to Object: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.
  7. Rights Related to Automated Decision-Making: We do not engage in automated profiling or decision-making that produces legal effects concerning you.

To exercise any of these rights, please contact us using the details provided in Section 9.

6. International Data Transfers

Sixty Five Design is operated from the United States. If you access our website or engage our services from the EEA/UK, your personal data will be transferred to, stored, and processed in the United States.

Where international transfers occur, we implement appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission or equivalent frameworks) to ensure that your data remains protected in accordance with GDPR standards.

7. Cookies and Tracking Technologies

Our website utilizes cookies and similar tracking technologies to analyze site performance and user interaction.

  • Essential Cookies: Necessary for the fundamental operation and security of the website.
  • Analytics/Performance Cookies: Used to understand visitor behavior and improve our digital layouts and user experience.

You can manage your cookie preferences at any time by configuring your browser settings to refuse or delete cookies.

8. Data Security and Retention

We deploy appropriate technical and organizational security measures—including encryption, restricted access protocols, and secure hosting environments—to protect personal data against accidental loss, unauthorized access, destruction, or alteration.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this statement, resolve disputes, enforce agreements, or comply with legal mandates.

9. Contact Information & Inquiries

If you have questions regarding this GDPR compliance statement, wish to exercise your data protection rights, or want to raise a concern about how your data is handled, please reach out to us:

Last Updated: August 27, 2026