Who is responsible
The controller of your personal data is Isteno SIA, registration no. 40203532522, Pūces iela 49-53C, Rīga, LV-1082, Latvia, which trades as Framelift Studio. Write to hello@frameliftstudio.com about anything in this notice.
What we collect and where it comes from
If we might contact your business, we collect information that the business itself has made public:
- business name, category, address and city, from public business listings such as map services and directories;
- the business website and the contact email or phone number published there or in the listing;
- photos published on your website or listing, and ads your business runs as shown in Meta's public Ad Library.
If you reply to us or become a customer, we also keep our emails with you, the name of the person writing, billing details and payment status, the files you send us and the files we deliver. Card details are handled by Stripe; we never see your full card number.
If you ask for a free sample on this website, we receive the link you give us, your email address, your business name if you give it, which form on the site you used, the time, and the country your request came from (a country code our host derives from the connection; we do not store your IP address). To stop abuse, the form keeps a one-way, keyed code made from your network address for at most two hours, then deletes it.
This website sets no cookies. It counts visits with Vercel Web Analytics, which uses no cookies and records, as anonymous aggregate statistics, the page address, the referring site, country, browser, operating system and device type, and whether a step of the free-sample form was completed (never what you typed). According to Vercel, a visitor is recognised for at most 24 hours by a code made from the request, which is then discarded. Private sample and delivery pages are not counted. Our hosting provider also records technical data (IP address, browser, time of request) to run and protect the site.
Why we use it, and on what legal basis
- To offer our services to businesses by email and make a free sample for them: our legitimate interest in business-to-business contact (GDPR article 6(1)(f)). We write only to published business addresses, keep follow-ups few, and stop at once when asked.
- To make the free sample you ask for on this website and email it to you: our legitimate interest in answering a business's request (article 6(1)(f)).
- To count visits and see how the site and its form are used, without cookies: our legitimate interest in running the site (article 6(1)(f)).
- To deliver what you ordered: performance of a contract (article 6(1)(b)).
- To issue invoices and keep accounting records: legal obligation (article 6(1)(c)).
- To keep the website running and secure: legitimate interest (article 6(1)(f)).
Opting out
Reply "stop" to any of our emails, or write to hello@frameliftstudio.com. We stop contacting you immediately and take down any sample page made for you. We keep only your email address and domain on a suppression list, so that we never contact you again.
Who we share it with
We use service providers who process data for us under contract: our website host, our email providers, Stripe for payments, and AI image and video model providers that process the photos and ad material we edit. Some of them are outside the European Economic Area, mainly in the United States; those transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell personal data.
How long we keep it
- Prospect records and sample pages: deleted 12 months after our last message if we don't work together. A free-sample request waits on our host only until we collect it into these records, and is then deleted there.
- The suppression list: kept for as long as we send email, so that an opt-out lasts.
- Delivery links: the files and the download page are removed 90 days after delivery, so please keep your own copy.
- Before/after photos, names and quotes a client has allowed us to show: until the client withdraws that permission by email.
- Invoices and accounting records: for the period Latvian accounting law requires.
Your rights
You can ask for access to your data, correction, deletion, restriction of processing and a copy in a portable format. You can object at any time to processing based on legitimate interest, and to direct marketing without giving a reason. You can also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv).
We make no decisions about you by automated means that have legal or similarly significant effects.