Privacy Policy

Draft notice: this policy is a starting template prepared for LEIKA Studio. It should be reviewed and completed with the studio’s registered legal details before the site goes live. It is not legal advice.

1. Who we are

The data controller is LEIKA Studio (legal entity details to be added), based in Lithuania (EU). Contact: labas@leikastudio.lt.

2. What data we collect

• Project enquiries: business name, email, country, website type, budget, timeline, requested features, design examples and any message you send.
• Project communication: emails and messages exchanged during a project, and files you share with us.
• Billing: invoicing details needed to issue invoices and meet accounting obligations.
• Technical data: basic server logs kept by our hosting provider for security. We do not use advertising cookies.

3. Why we use it (legal basis)

• To reply to your enquiry and prepare a proposal — steps taken at your request before a contract (GDPR Art. 6(1)(b)).
• To deliver the agreed project — performance of a contract (Art. 6(1)(b)).
• To keep accounting records — legal obligation (Art. 6(1)(c)).
• To keep the site secure and prevent spam — legitimate interests (Art. 6(1)(f)).

4. Who we share it with

We use trusted service providers to run the studio, such as website hosting, email, document storage and payment processing. They process data only on our instructions. Some may be located outside the EU/EEA; where that happens, appropriate safeguards such as the European Commission’s Standard Contractual Clauses are used. We never sell personal data.

5. AI-assisted processing

We use AI tools to help analyse enquiries and draft replies and project documents. A person reviews and approves every message before it is sent to you. We do not use automated decision-making that produces legal or similarly significant effects.

6. How long we keep it

Enquiries that do not lead to a project are deleted within 12 months. Project and billing records are kept for as long as required by Lithuanian accounting law.

7. Your rights

You can request access, correction, deletion, restriction, portability, or object to processing by emailing us. You also have the right to complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or your local supervisory authority.

8. Changes

We may update this policy. The date at the top shows the latest version.