Privacy Policy
Last updated: 12 September 2026
Website: rebelmore.com
Business name: Rebel More Studio
Contact email: yes@rebelmore.com
This Privacy Policy explains how Rebel More Studio collects, uses, stores and protects personal data when you visit our website, contact us, join our email list, interact with our content, or buy from our boutique shop.
Rebel More Studio is the business name used for this website. The business is not currently registered as a separate legal entity. Until this changes, Rebel More Studio is responsible for the personal data processed through this website.
We process personal data in line with the General Data Protection Regulation, also known as GDPR, and applicable data protection rules in Lithuania and the European Union.
1. Who is responsible for your data
The data controller for this website is:
Rebel More Studio
Website: rebelmore.com
Email: yes@rebelmore.com
For any privacy-related questions, requests or concerns, contact us at yes@rebelmore.com .
2. What personal data we collect
We may collect personal data that you give us directly, data that is collected automatically when you use the website, and data connected to purchases or email marketing.
3. Data you give us directly
When you contact us, submit a form, join our email list, request information, book or enquire about services, or buy from our boutique shop, we may collect:
your name
email address
phone number, if you provide it
brand, business or company name
website or social media handle, if you provide it
message or enquiry details
service preferences
order details
billing information
shipping information
payment confirmation details
communication and marketing preferences
any other information you choose to send us
4. Data collected automatically
When you visit rebelmore.com, we may collect technical and usage data, including:
IP address
browser type
device type
operating system
pages visited
time spent on the website
referral source
approximate location
cookie choices
website interaction data
Some of this information is collected through cookies, analytics tools, pixels and similar technologies. Non-essential cookies and marketing pixels are only used with your consent.
5. Contact forms and enquiries
When you submit a form or contact us by email, we use your information to read, manage and respond to your enquiry.
This may include your name, email address, message and any other details you choose to include.
Legal basis: pre-contractual steps, contract performance and legitimate interest.
We use this data so we can respond to you, understand your request, prepare proposals, communicate about potential work and manage our relationship with you.
6. Email and marketing letters
This website has no newsletter signup form, and we do not use an email marketing platform.
We write to you when you ask us something, when we prepare your brand analysis, and while we work together on a project.
If you ticked the optional box when you sent the analysis form, we may also write to you about the studio, launches, offers and content.
That box is separate from the analysis, it is never ticked for you, and your analysis is sent whether you tick it or not.
Legal basis: consent for marketing letters, and pre-contractual steps or contract performance for everything else.
All of our email is sent and received through our own mailbox at Hostinger, our hosting and mail provider. No email marketing service sends letters for us.
You can stop marketing letters at any time by replying to any letter or by writing to yes@rebelmore.com . After you ask us to stop, we keep a limited record of your email address so that we do not write to you again by mistake.
7. Boutique shop and purchases
Rebel More Studio plans to offer physical and digital products through the website.
When you buy something from our boutique shop, we may collect and process:
name
email address
billing details
shipping details
order details
purchased products
payment status
delivery details
return or refund information
customer support communication
We use this data to process your order, confirm payment, deliver your purchase, provide customer support, manage returns or refunds, and meet legal accounting or tax obligations.
Legal basis: contract performance, legal obligation and legitimate interest.
We do not store full payment card details ourselves. Payments will be processed by the payment provider available at checkout.
8. Shipping
For physical products, we may share the information needed to deliver your order with shipping, courier, fulfilment or postal service providers.
We plan to offer worldwide shipping. Extra costs, duties, taxes or customs charges may apply outside the European Union.
Legal basis: contract performance and legitimate interest.
9. Digital products
If we sell digital products, we may process your data to deliver the product, confirm access, send download links, manage customer support and keep purchase records.
Legal basis: contract performance, legal obligation and legitimate interest.
10. Website analytics
We do not use Google Analytics or any other website analytics service.
Our server keeps ordinary technical logs of the requests it receives, such as the IP address, the time, the page and the browser, and we use them to keep the website working and secure.
Legal basis: legitimate interest in running and protecting our own website.
If we add an analytics tool later, we will name it here and it will run only with your consent.
11. Advertising and marketing pixels
We use one advertising tool on this website: the Meta Pixel, provided by Meta.
We do not use the TikTok Pixel, Google Ads tracking or Google Analytics advertising features.
The pixel records page views and an event when a booking link is clicked, so we can see how many people reach us from an advert and how many of them book a call.
Meta may receive information about your visit, device, browser and the pages you view, and may use it to measure adverts and build audiences.
Legal basis: consent.
The pixel does not load until you accept cookies in the banner. If you decline, its code is not loaded.
12. Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to work. These may support basic functions such as security, page navigation, forms, shopping cart functionality, checkout and cookie preferences.
With your consent, we may also use analytics and marketing cookies.
You can accept, decline or manage cookies through the cookie banner on our website. You can also change your browser settings to block or delete cookies.
For more information, please read our Cookie Policy.
13. Embedded third-party tools and content
This website does not embed third-party booking tools, maps, videos, social feeds, shop widgets or comment tools.
The only third-party code that runs in your browser here is the Meta Pixel, and only after you accept cookies.
Our fonts, images and styles are served from our own server, so no font or media provider learns about your visit.
Some links take you elsewhere: our booking links open cal.eu, where the call is booked, and our social links open Instagram, TikTok and Behance.
Once you follow such a link you are on that company's own service, its terms and privacy policy apply there, and we do not see what you do.
14. Who we share personal data with
We do not sell your personal data.
We built and run this platform ourselves, and a small number of providers keep it running. They handle data only to do their part for us.
We use these providers.
Neon, which hosts our database. Everything the website and the client portal store lives there, in a database located in the European Union.
Hostinger, which hosts our server and our mailbox. The website runs there, our email is sent and received there, and files uploaded to the client portal are stored there.
Anthropic, which provides the AI model used inside the client portal. When a draft is asked for, in the portal or by the studio, the material it is built from is sent to Anthropic to produce that draft.
Meta, for the advertising pixel on this website, which runs only with your consent.
Neon and Anthropic are United States companies. The database we use sits in the European Union, while AI drafts are produced in the United States, as the section on international data transfers explains.
We may also share personal data with our accountant, our legal or professional advisors, and with public authorities where the law requires it.
If the boutique shop opens, payment and delivery providers will be named here before any order is taken.
We give each provider only what it needs for its part, and none of them is allowed to use your data for their own purposes.
15. AI features in the client portal
The client portal includes features that produce drafts with artificial intelligence: campaign guidance, drafts for single posts and new content ideas.
These features run through Anthropic, the company behind the Claude models, using its API under commercial terms. Anthropic acts as our processor for this.
When one of these features runs, we send the material the draft is built from:
the brand's system, meaning its codes, direction, vocabulary and the words it avoids
the content plan, including posts, series and campaigns
campaign briefs and the answers written in the portal
topic library entries
our own framework notes and the published research cited on our Method page
This material is about a brand, not about a person. It contains personal data only where someone puts personal data into it, for example a name in a caption, a brief or a note.
We do not send login details, passwords, session data, invoices or payment data, and we do not send uploaded images, videos or files.
Under Anthropic's commercial API terms, what we send is not used to train its models.
Legal basis: contract performance for the features included in your project or plan, and legitimate interest in running and improving the portal.
Anthropic's API processes this material in the United States, which is outside the European Economic Area.
For that transfer we rely on the safeguards in Anthropic's data processing terms, including Standard Contractual Clauses and, where it applies, the EU-US Data Privacy Framework.
Each AI run is recorded in the portal with its time, the feature used and its result, so we can support you and count usage against your plan.
The drafts and the record of runs stay in the portal until you delete them or the account is closed.
Please do not put special category data into the portal, such as health data or data revealing beliefs, and please do not add personal data the work does not need.
These features do not make automated decisions with legal or similarly significant effects. Everything they produce is a draft that a person reads and decides on, as set out in the section on automated decision-making.
16. International data transfers
Some of the tools and providers we use may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards where required, such as Standard Contractual Clauses, adequacy decisions, the EU-US Data Privacy Framework or other lawful transfer mechanisms under GDPR.
17. How long we keep personal data
We keep personal data only for as long as necessary for the purpose it was collected, unless a longer period is required by law.
General retention periods:
contact form and enquiry data: up to 24 months after the last communication
client communication and service records: for the duration of the working relationship and for a reasonable period afterwards
email marketing data: until you unsubscribe or withdraw consent
order and transaction data: for as long as required for accounting, tax, consumer protection or legal purposes
analytics data: according to our analytics settings and cookie choices
advertising data: according to the relevant platform settings and your consent choices
legal records: for as long as needed to establish, exercise or defend legal claims
When data is no longer needed, we delete it, anonymise it or securely archive it where required by law.
18. Your rights
Under GDPR, you have rights in relation to your personal data.
You may have the right to:
access your personal data
correct inaccurate or incomplete data
request deletion of your data
restrict how we process your data
object to processing
request data portability
withdraw consent at any time, where processing is based on consent
lodge a complaint with a data protection authority
To exercise your rights, contact us at yes@rebelmore.com .
We may need to verify your identity before responding to certain requests.
If you are in Lithuania, you can contact the Lithuanian State Data Protection Inspectorate, known as Valstybinė duomenų apsaugos inspekcija .
19. Withdrawal of consent
Where we process your data based on consent, you can withdraw that consent at any time.
This includes:
unsubscribing from marketing emails
changing cookie preferences
rejecting analytics cookies
rejecting marketing cookies
contacting us directly
Withdrawing consent does not affect processing that happened before consent was withdrawn.
20. Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.
However, no website, email system, payment system or online service can be guaranteed to be completely secure.
Please do not send sensitive personal information through website forms or email unless necessary.
21. Children
This website, our services and our boutique shop are not directed at children under 18.
We do not knowingly collect personal data from children. If you believe that a child has provided personal data through this website, contact us at yes@rebelmore.com and we will take appropriate steps to delete it.
22. Automated decision-making
We do not use personal data for automated decision-making that produces legal or similarly significant effects.
23. Links to other websites
Our website may contain links to third-party websites, platforms or social media pages.
We are not responsible for the privacy practices of third parties. Please read their privacy policies before providing personal data to them.
24. The client portal and portal data
If you are a client, we process the material you and your team put into the client portal, including your brand codes, direction, content plan, campaigns, topic library, visual board, uploaded files and the account details of the people who log in.
Legal basis: contract performance and legitimate interest in running the portal we agreed to deliver.
Login email addresses, one-time login codes and session records are processed so that one account is not shared by several people, and are kept only as long as that requires.
We keep portal data for as long as you hold a portal with us, and after that as described in the section on how long we keep personal data.
If we stop offering the portal, we give you a PDF copy of your portal pages, your delivered files and your uploaded media before it closes. Those files stay downloadable for at least 60 days afterwards.
After that we may delete what is left, apart from what we must keep for accounting, tax or legal reasons.
25. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The updated version will be published on this page with a new “Last updated” date.