Privacy policy

PRIVACY POLICY

Last Updated: 10 November 2025

This Privacy Policy applies to L ISLAND STUDIO LLP (Company Number: OC458569), a limited liability partnership registered in England and Wales.

Registered Office: Stoney Works, 8 Stoney Lane, London, United Kingdom, SE19 3BD

Contact Email: contact@lisland.studio

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, purchase our digital products, or interact with our services. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data (Use and Access) Act 2025.

WHO WE ARE AND HOW TO CONTACT US

L ISLAND STUDIO LLP is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data protection practices, please contact us at:

- Email: contact@lisland.studio
- Address: Stoney Works, 8 Stoney Lane, London, United Kingdom, SE19 3BD

We take your privacy seriously and are committed to protecting your personal information in accordance with UK data protection laws.

WHAT PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data:

**Information You Provide to Us:**
- Contact information (name, email address, postal address, telephone number)
- Account credentials (username, password)
- Payment information (processed securely through our payment processors)
- Order and transaction history
- Communications with us (customer service inquiries, feedback, reviews)

**Information Collected Automatically:**
- Device and browser information (IP address, browser type, operating system)
- Usage data (pages visited, time spent on site, referring URLs)
- Cookies and similar tracking technologies (see Section 8)

**Information from Third Parties:**
- Payment processors (transaction confirmation data)
- Social media platforms (if you interact with us on social media)

We do not knowingly collect personal data from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

HOW WE USE YOUR PERSONAL DATA

We process your personal data for the following purposes under the following lawful bases:

**Contract Performance:**
- Processing and fulfilling orders
- Providing customer support
- Managing your account
- Delivering digital products and services

**Legitimate Interests:**
- Improving our website and services
- Conducting business analytics
- Fraud prevention and security
- Marketing communications (with opt-out option)

**Legal Obligation:**
- Complying with tax and accounting requirements
- Responding to legal requests
- Maintaining business records

**Consent:**
- Sending marketing emails (where required)
- Using non-essential cookies
- Processing special category data (if applicable)

You have the right to object to processing based on legitimate interests. See Section 9 for more information about your rights.

WHO WE SHARE YOUR DATA WITH

We may share your personal data with the following categories of recipients:

**Service Providers:**
- Payment processors (for secure transaction processing)
- Web hosting providers
- Email service providers
- Cloud storage providers
- Analytics providers

**Legal and Regulatory Authorities:**
- When required by law or to protect our legal rights
- To prevent fraud or criminal activity

**Business Transfers:**
- In connection with a merger, acquisition, or sale of assets

We ensure all third parties are bound by appropriate data protection obligations and process your data only in accordance with our instructions.

INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

- Transfers to countries with adequacy decisions from the UK government
- Standard Contractual Clauses approved by the UK Information Commissioner's Office
- Binding Corporate Rules or other approved transfer mechanisms

We ensure that any international transfers meet the "not materially lower" data protection test as required by the Data (Use and Access) Act 2025.

HOW LONG WE KEEP YOUR DATA

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

- **Account information**: Retained while your account is active, plus 3 years after account closure
- **Order and transaction records**: 7 years (to comply with tax and accounting requirements)
- **Marketing data**: Until you withdraw consent or 3 years of inactivity
- **Website analytics**: 26 months
- **Customer service communications**: 3 years

After the retention period expires, we will securely delete or anonymize your personal data.

AUTOMATED DECISION-MAKING AND AI

We may use automated systems and algorithms to:

- Analyze website usage patterns
- Detect fraudulent transactions
- Personalize content recommendations

We do not use automated decision-making that produces legal or similarly significant effects without human oversight. If we introduce such processing in the future, we will update this policy and provide you with information about your right to object.

COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us improve your browsing experience.

**Essential Cookies (Always Active):**
- Session management
- Security and authentication
- Shopping cart functionality

**Non-Essential Cookies (Require Consent):**
- Analytics cookies (Google Analytics, etc.)
- Marketing cookies
- Preference cookies

You can manage your cookie preferences through our cookie consent tool or your browser settings. Please note that disabling essential cookies may affect website functionality.

For more information about our cookie practices, please see our Cookie Policy [LINK TO COOKIE POLICY].

**Cookie Retention:** Analytics cookies are retained for 26 months.

YOUR DATA PROTECTION RIGHTS

Under UK GDPR and the Data (Use and Access) Act 2025, you have the following rights:

**Right to Access**: Request a copy of the personal data we hold about you
**Right to Rectification**: Request correction of inaccurate or incomplete data
**Right to Erasure**: Request deletion of your data (subject to legal obligations)
**Right to Restrict Processing**: Request limitation of how we process your data
**Right to Data Portability**: Receive your data in a structured, commonly used format
**Right to Object**: Object to processing based on legitimate interests or for marketing purposes
**Right to Withdraw Consent**: Withdraw consent at any time (where processing is based on consent)
**Right to Complain**: Lodge a complaint with the Information Commissioner's Office (ICO)

**How to Exercise Your Rights:**
To exercise any of these rights, please contact us at [INSERT EMAIL]. We will respond to your request within a reasonable and proportionate timeframe, typically within one month. In complex cases, we may extend this period by up to two additional months.

We may need to verify your identity before processing your request to protect your personal data from unauthorized access.

**Right to Lodge a Complaint:**
If you are unhappy with how we handle your personal data, you have the right to complain to the UK Information Commissioner's Office:

- Website: https://ico.org.uk
- Telephone: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

COMPLAINTS PROCEDURE

We are committed to resolving any concerns you may have about our data protection practices. If you have a complaint:

1. **Contact us** at contact@lisland.studio with details of your concern
2. We will **acknowledge your complaint** within 3 business days
3. We will **investigate** your complaint thoroughly
4. We will **respond** with our findings and proposed resolution within 30 days
5. If you are not satisfied, you have the right to **escalate** to the ICO

We maintain records of all complaints and our responses for compliance purposes.

DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

- Encryption of data in transit (SSL/TLS)
- Secure password storage (hashing and salting)
- Regular security assessments
- Access controls and authentication
- Employee training on data protection
- Incident response procedures

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.

DIGITAL PRODUCTS POLICY

When you purchase digital products from us:

- **Immediate Access**: Download links are provided immediately after purchase
- **Download Period**: Links remain active for 30 days from purchase
- **Refund Policy**: Due to the immediate availability of digital files, we do not offer refunds except as required by UK consumer protection law
- **Technical Support**: If you experience issues accessing your files, contact us at contact@lisland.studio within 30 days

Your purchase history and download records are retained for 7 years for accounting purposes.

THIRD-PARTY LINKS

Our website may contain links to third-party websites, plugins, or applications. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

CHANGES TO THIS PRIVACY POLICY

We review and update this Privacy Policy at least annually or whenever there are material changes to:

- Our data processing activities
- Applicable laws and regulations
- Our business operations

When we make significant changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email (if you have an account)
- Display a prominent notice on our website

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.

LEGAL BASIS SUMMARY

We process your personal data under the following lawful bases and retention periods:

**Order Processing**

- Lawful Basis: Contract performance

- Retention Period: 7 years

**Customer Support**

- Lawful Basis: Contract performance

- Retention Period: 3 years

**Marketing Emails**

- Lawful Basis: Consent - Retention Period: Until withdrawn or 3 years of inactivity

**Fraud Prevention**

- Lawful Basis: Legitimate interests

- Retention Period: 7 years

**Website Analytics**

- Lawful Basis: Legitimate interests

- Retention Period: 26 months

**Legal Compliance**

- Lawful Basis: Legal obligation

- Retention Period: As required by law

CONTACT AND COMPLAINTS

**Data Controller:**
L ISLAND STUDIO LLP
Company Number: OC458569
Stoney Works, 8 Stoney Lane, London, United Kingdom, SE19 3BD
Email: contact@lisland.studio

**Supervisory Authority:**
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113

**Your privacy matters to us. If you have any questions or concerns about this Privacy Policy, please don't hesitate to contact us.**