Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), users are informed about the processing of their personal data as follows.

1. Data controller

• Trade name: Lexington Studio
• Owner: [pending]
• Tax ID (NIF/VAT): 53776936S
• Address: Pofesor Potter , 183 33203 Gijón (Asturias)
• Email: claudia@lexingtonestudio.com

2. Purposes of processing

Enquiries and project requests. To answer the enquiries and project requests you send us by email, through social networks or, where applicable, through the contact form, and to prepare quotes.

Clients. To provide the contracted creative services (design, photography, video and marketing) and to manage invoicing and payments.

Online shop. To manage your customer account, orders, payment, shipping, invoicing, returns and warranties.

Marketing communications. If you expressly authorise it, we will send you news, projects and offers by email.

No profiling or automated decision-making is carried out with your data.

3. Data processed

We process identification and contact data (name, email address and phone number), the content of your enquiries and, for clients and customers, the data needed to provide the service or process the order: shipping and billing address, order history and invoicing data. We do not store full card details: payments are processed directly by the payment provider.

4. Legal basis

Enquiries: your consent (Art. 6.1.a GDPR).

Clients and shop orders: performance of the contract, or pre-contractual steps taken at your request (Art. 6.1.b GDPR).

Invoicing and tax obligations: compliance with legal obligations (Art. 6.1.c GDPR).

Marketing communications: your consent (Art. 6.1.a GDPR), which you may withdraw at any time.

5. Images of people

When our services involve photographing or filming people, the use of those images will be agreed in writing with the client and, where applicable, with the people who appear in them. Images are only published in our portfolio or social networks with the appropriate authorisation.

6. Data retention

Enquiries: for as long as needed to handle them and, afterwards, for the limitation periods of any potential liability.

Clients and customers: for the duration of the relationship and, afterwards, for the periods required by law (generally six years for commercial and tax purposes).

Marketing communications: until you withdraw your consent or unsubscribe.

7. Recipients

Your data will not be disclosed to third parties, except where required by law (Tax Administration, judges and courts) or where necessary to process your order: to shipping companies, and to the payment provider and banks.

Web hosting, email and e-commerce service providers access the data as data processors. Where applicable, so do tax and accounting advisers.

8. Social networks

Lexington Studio has profiles on Instagram, TikTok, YouTube, Spotify, X and LinkedIn. If you interact with them, your data will be processed in accordance with each network’s terms, in addition to this policy. For data processed by a social network on its own behalf, you may exercise your rights directly with that network.

9. Your rights

You can exercise the following rights by writing to hey@lexingtonstudio.com or by post to the address above, enclosing a document proving your identity:

• Access: find out what data about you we process.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your data when it is no longer needed.
• Restriction: ask us to keep it only for the establishment or defence of legal claims.
• Objection: object to the processing in certain circumstances, including marketing communications.
• Portability: receive your data in a structured format, or have it transmitted to another controller.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

If you believe your rights have not been properly respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your EU country of residence.

10. Minors

This website is not intended for children under 14. Purchases and contracting of services must be made by adults.

11. Security measures

We apply appropriate technical and organisational measures to ensure the security of your data and prevent its loss, alteration or unauthorised access. These include encrypted transmission using an SSL certificate.

12. Cookies

This website uses cookies. You can find out which cookies we use and how to manage them in our Cookie Policy.

13. Changes to this privacy policy

We may amend this policy to adapt it to legislative or service changes. We recommend that you review it periodically.