Privacy Policy for Lightstud

Last Updated: March 09, 2026

General Info

This Privacy Policy explains how LightStud (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit or use www.lightstud.com (the “Website”) and when you contact us or use our services.

By using the Website, you acknowledge that you have read this Privacy Policy.

1. Data controller and contact

The data controller for your personal data is:

Ilyas Halis Sarigoz
Website: www.lightstud.com
Email: eliaslightstudio@gmail.com

If you have any questions or requests about this Privacy Policy or our processing of your personal data, you can contact us at eliaslightstudio@gmail.com.

2. What data we collect

We may collect and process the following categories of personal data:

  1. Data you provide to us

    • Contact details: name, email address, and any other information you choose to include when you contact us via email or contact forms.

    • Account / project details (if applicable): information you provide when you inquire about or work with us (e.g., company name, role, project brief, invoicing details).

    • Communication content: messages you send us, feedback, and other correspondence.

  2. Data collected automatically

    • Usage data: IP address, browser type and version, device type, operating system, pages visited, time and date of visits, time spent on pages, and other diagnostic data.

    • Cookies and similar technologies: small text files stored on your device to ensure the Website functions properly, remember your preferences, and analyse how you use the Website.

  3. Data from third parties (if used)

    • Analytics providers: anonymised/aggregated statistics about Website usage.

    • Service providers: payment or billing data (if we offer paid services via third-party providers), limited to what is necessary for invoicing and accounting.

We do not knowingly collect special categories of personal data (such as data concerning health, religion, or political opinions) via the Website.

3. Purposes and legal bases

We process your personal data only when we have a valid legal basis under the GDPR.

  1. To provide and operate the Website

    • Purpose: to display content, maintain security, and ensure technical functioning.

    • Legal basis: our legitimate interests in operating and improving the Website (Art. 6(1)(f) GDPR).

  2. To respond to inquiries and provide services

    • Purpose: to respond when you contact us, discuss potential or ongoing projects, and perform our contracts.

    • Legal basis: performance of a contract or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interests in communicating with you and providing services (Art. 6(1)(f) GDPR).

  3. To manage business relationships and administration

    • Purpose: invoicing, accounting, project management, and internal records.

    • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations under EU and Lithuanian law (e.g., tax and accounting rules) (Art. 6(1)(c) GDPR).

  4. To improve the Website and services

    • Purpose: analyse how visitors use the Website, improve user experience, and develop our services.

    • Legal basis: our legitimate interests in analysing and improving our Website and services (Art. 6(1)(f) GDPR). Where required by law, we rely on your consent, particularly for non-essential cookies (Art. 6(1)(a) GDPR).

  5. Marketing communications (if used)

    • Purpose: send you information about our services, updates, or content that may be of interest to you.

    • Legal basis: your consent (Art. 6(1)(a) GDPR) or our legitimate interests in promoting our services (Art. 6(1)(f) GDPR), in accordance with applicable e-privacy and Lithuanian rules.

    • You can opt out at any time by following the unsubscribe instructions or contacting us at eliaslightstudio@gmail.com.

4. Cookies and similar technologies

We may use cookies and similar technologies to:

  • Ensure the Website functions correctly (essential cookies).

  • Remember your preferences (functional cookies).

  • Analyse Website traffic and usage (analytics cookies).

Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can manage your cookie preferences via your browser settings and (if implemented) our cookie banner.

Disabling certain cookies may affect the functionality or performance of the Website.

5. How we share your data

We do not sell your personal data. We may share your data only with:

  1. Service providers

    • Hosting providers, website platforms, analytics providers, email service providers, and other tools we use to operate the Website and deliver services.

    • These providers act as processors and may only process your data in accordance with our instructions and for the purposes described in this Policy.

  2. Professional advisors

    • Accountants, legal advisors, or other consultants where necessary for our legitimate interests and compliance with legal obligations.

  3. Public authorities

    • Where required by EU or Lithuanian law, for example for tax, accounting, or law enforcement purposes, or to protect our rights or the rights of others.

If we engage service providers outside the European Economic Area (EEA), we will ensure an adequate level of protection for your personal data, for example by relying on an adequacy decision of the European Commission or standard contractual clauses.

6. Data retention

We keep your personal data only for as long as necessary for the purposes described in this Policy, or as required by law.

  • Contact and communication data: retained for the duration of our communication and for a reasonable period thereafter (e.g., up to 3 years) for reference, dispute resolution, and legal defence.

  • Contract and billing data: retained for the duration of the contractual relationship and as required under Lithuanian accounting and tax laws (often 10 years, unless a different statutory period applies).

  • Technical and analytics data: kept for shorter periods needed for security, analysis, and improvement, and then anonymised or deleted.

When we no longer need your data, we will delete or anonymise it.

7. Your rights under GDPR and Lithuanian law

As a data subject in the EU and Lithuania, you have the following rights, subject to the conditions and limitations in the GDPR and national law:

  1. Right of access

    • You can request confirmation as to whether we process your personal data and obtain a copy of that data, along with information about the processing.

  2. Right to rectification

    • You can ask us to correct inaccurate or incomplete personal data.

  3. Right to erasure (“right to be forgotten”)

    • You can ask us to delete your personal data in certain cases, for example when the data is no longer necessary or you withdraw consent (where consent was the basis).

  4. Right to restriction of processing

    • You can ask us to restrict processing of your personal data in specific situations, such as while we are verifying its accuracy or the lawful basis for processing.

  5. Right to data portability

    • You can ask to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller, where technically feasible and where processing is based on consent or contract and carried out by automated means.

  6. Right to object

    • You can object at any time to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation.

    • You always have the right to object to processing for direct marketing.

  7. Right to withdraw consent

    • Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before the withdrawal.

  8. Right to lodge a complaint

    • You can lodge a complaint with a supervisory authority if you believe your rights have been violated.

    • In Lithuania, the supervisory authority is:
      State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija)
      Website: https://vdai.lrv.lt/
      You may also contact the supervisory authority in your country of residence or work within the EEA.

To exercise your rights, please contact us at eliaslightstudio@gmail.com and clearly indicate your request and relevant details.

8. Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include:

  • Use of secure hosting and encrypted connections (HTTPS/SSL).

  • Access controls and limited access to personal data on a need-to-know basis.

  • Regular monitoring and updates of systems and tools.

However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

9. Children’s data

The Website is not directed to children under 18, and we do not knowingly collect personal data from children under this age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at eliaslightstudio@gmail.com so we can delete such data where required by law.

10. International transfers

If we transfer your personal data outside the European Economic Area, we will ensure an adequate level of data protection, for example by:

  • Relying on an adequacy decision of the European Commission; or

  • Using standard contractual clauses approved by the European Commission, supplemented where necessary by additional safeguards.

You may contact us for more information on specific transfer mechanisms that apply to your data.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by a notice on the Website or by other means.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your data.

12. How to contact us

If you have any questions about this Privacy Policy or your personal data, or if you wish to exercise your rights, you can contact us at:

Ilyas Halis Sarigoz | Designer
Email: eliaslightstudio@gmail.com
Website: www.lightstud.com

12. Legal

Country: Vilnius, Lithuania
Name: Ilyas Halis Sarigoz
IBAN: LT353250093561216937

Tax code: 741200
Asm. Kodas: 50110095321

Mail: eliaslightstudio@gmail.com
Adress: Seskine Sodu 2-oji g.11, 08343, Vilnius
Phone Number: +370 625 97323

Contact us!

Tell me about your project using the form below. If we’re a good fit, you’ll get a link to book a free consultation call. I can’t wait to hear what you’re working on.

Your Beautiful Name & Surname 🥰 Required

What services your business needs?

How did you find us?