Privacy Policy

1. Who we are

Lucid Studio is a freelance web design and development studio operated by [Your Full Names] (the "Agency").

We are based in Greece and provide our services remotely to clients worldwide.

2. What personal data we collect

• Contact information: Name, email address, phone number, and social media handle so we can communicate with you about the project, send invoices, and deliver the final product.
• Payment information: Stripe or PayPal transaction data, such as your email, last four card digits, and payment amount, so deposits and final payments can be processed.
• Project data: Website URL, brand assets, design preferences, and other materials needed to create and deliver the website you commissioned.
• Technical data (optional): IP address, browser type, and referral URL that may be collected automatically when you visit our site to help improve performance and security.

3. How we use your data

• Communication, including responding to inquiries, sending proposals, invoices, and project updates.
• Service delivery, including building, testing, and launching your website.
• Legal compliance, including keeping invoicing and tax records for 5 years as required under Greek law.
• Marketing only where appropriate, such as anonymized case studies or screenshots of finished sites. We will never use your name or branding for marketing without your explicit written consent.

4. Who we share your data with

• Service providers such as Stripe or PayPal for payment processing, Vercel, Netlify, or WordPress hosting, and Google Workspace for email and documents. They only receive the data needed to perform their service and remain subject to their own privacy policies.
• Legal authorities when required by law, such as for a tax audit or court order.

5. Your rights (GDPR)

You have the right to request access to the personal data we hold about you, ask us to correct inaccurate data, request deletion where legally possible, restrict how we process your data, receive your data in a commonly used format, and object to direct marketing.

To exercise any of these rights, write to privacy@lucidstudio.xyz or use the contact details below. If you do not have a physical office address listed yet, you can state "Based in Greece." We will respond within 30 days.

6. Data retention

• Project-related data is kept for 3 years after project completion so we can support warranty issues if needed.
• Financial and tax data is kept for 5 years as required by Greek tax law.

7. Security

We store data on password-protected Google Drive and encrypted servers such as Vercel or Netlify. Access is limited to the two founders only.

8. Cookies

If analytics are enabled on the site, we use only essential cookies and privacy-conscious analytics settings, such as anonymized IP handling. You can disable cookies through your browser settings.

9. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will update the effective date and notify clients by email where appropriate.