Privacy policy
PRIVACY POLICY
Last updated: August 12, 2026
1. Data Controller
Justin LEDAIN, sole proprietor
Trading name: WestLake Creative Studio
12 Tue Chien, 61210 Bazoches-au-Houlme, France
SIRET: 108 696 915 00017
Contact: contact@westlakestudiodesign.com
2. Data We Collect
When you place an order
We collect your first name, last name, email address, billing address, order history, timestamp of acceptance of the General Terms and Conditions, and timestamp of your waiver of the right of withdrawal.
Payment information is processed directly by our payment service provider. We never have access to your full payment details and do not store them.
When you submit a brief
We may collect your brand name, industry, description of your offer, target audience, positioning, competitors, visual references, technical requirements, deadlines, and any other information you choose to provide.
When you contact us
We may collect your name, email address, company name, indicative budget, project type, and the content of your message.
When you schedule an appointment
We collect your name, email address, and the time slot you book through our scheduling tool.
When you submit a withdrawal request
We collect your first name, last name, email address, order number, order date, service concerned, the content of your request, and the relevant timestamp.
When you browse the website
We may collect your IP address, browser type, pages viewed, and visit duration. These data are collected through cookies, subject to your consent where required.
3. Purposes and Legal Bases
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Performance of the contract |
| Providing and delivering your files | Performance of the contract |
| Responding to your requests | Performance of the contract or legitimate interest |
| Managing withdrawal requests and refunds | Legal obligation |
| Preparing and retaining invoices and accounting records | Legal obligation |
| Retaining evidence of consent | Legal obligation |
| Improving the website and measuring audience traffic | Consent |
4. Recipients
Your personal data may be accessed by:
- Justin LEDAIN, as the data controller;
- Independent designers responsible for carrying out your service, solely to the extent necessary to perform the service and subject to contractual confidentiality obligations. Some of these designers are located outside the European Union;
- Our technical service providers, including hosting, payment processing, email and scheduling providers;
- Administrative or judicial authorities where legally required.
Your personal data are not sold or rented to third parties.
5. Transfers Outside the European Union
Some of our service providers and independent designers are located outside the European Union. Where applicable, these transfers are governed by the European Commission's Standard Contractual Clauses or by an adequacy decision.
Our main service providers include:
- Shopify International Ltd (Ireland) — website hosting and order processing
- Shopify Payments — payment processing
- Calendly LLC (United States) — appointment scheduling
- Google LLC (United States) — professional email services
6. Data Retention Periods
| Data | Retention Period |
|---|---|
| Customer account | Until deletion, followed by 3 years of inactivity |
| Orders and invoices | 10 years (accounting obligation) |
| Evidence of consent | 5 years |
| Withdrawal requests | 5 years |
| Briefs and deliverables | 12 months after delivery |
| Contact messages | 3 years |
| Prospects who do not make a purchase | 3 years after the last contact |
| Audience measurement cookies | Maximum of 13 months |
7. Your Rights
You have the following rights under applicable data protection laws:
- Right of access — to obtain a copy of your personal data;
- Right to rectification — to correct inaccurate or incomplete data;
- Right to erasure — to request deletion of your data, subject to our legal obligations;
- Right to restriction of processing — to request that the use of your data be restricted;
- Right to data portability — to receive your personal data in a reusable format;
- Right to object — to object to processing based on legitimate interests;
- Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal;
- Right to give post-mortem directives — to determine how your personal data should be handled after your death.
To exercise your rights: contact us at contact@westlakestudiodesign.com.
We will respond within one month of receiving your request.
If you believe that your rights have not been respected, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés):
www.cnil.fr
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
8. Cookies
Necessary cookies — used for shopping cart functionality, session management, security, and consent preferences. These cookies do not require your consent where permitted by applicable law.
Audience measurement cookies — used to collect website traffic and usage statistics. These cookies are subject to your consent where required by law.
You may change your cookie preferences at any time through the cookie consent banner or through your browser settings.
9. Security
The website is protected by an SSL/TLS certificate. Payments are processed by a PCI-DSS-compliant payment service provider.
Access to personal data is restricted to individuals who need it for legitimate business purposes, and those individuals are subject to confidentiality obligations.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, you will be informed in accordance with Article 34 of the GDPR where applicable.
10. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time.
Any substantial changes will be communicated to you by email or through a notice posted on the website.
