Privacy policy
Who controls your data
The controller of personal data submitted through this website is Łukasz Lorenc, operating as Lorenc Studio Łukasz Lorenc, VAT ID PL6392016601. For data-related matters, contact lukasz.lorenc@lorencstudio.com or call +48 795 946 331.
What data we collect and why
- Brief and call form: your name, company name, email address or phone number, project description, expected timeline and budget, and selected call time. We use this information to respond to your inquiry, prepare a quote and arrange a call (Article 6(1)(b) GDPR, steps taken before entering into a contract). The time selected in the brief is sent to us with the brief, while the call itself is booked through an external online calendar.
- Online call booking: when you book a call through an external booking calendar, the provider also processes the information from the booking form, including your name, email address and selected time, under the privacy policy available on the booking page. The purpose and legal basis are the same as for the brief.
- Website analytics: with your consent, we use Google Analytics 4 to measure page views and actions such as viewing projects, using the calculator, starting and submitting a brief, and clicking a phone, email or booking link. We do not send form contents, names, email addresses or phone numbers to Analytics. We use these measurements to improve the website and see which content helps clients (Article 6(1)(a) GDPR, consent). Google Analytics does not store individual IP addresses of users in the EU. It uses them briefly to determine an approximate location and discards them before storing the data.
- Meta advertising measurement: with your consent, the label-design campaign page runs the Meta Pixel. It measures a page view and submission of a brief. After a brief is saved successfully, we also send a server-side confirmation of the same event with the same identifier so Meta does not count it twice. We send the page address and the
_fbpor_fbcmeasurement identifiers. We do not send the brief contents, name, email address or phone number. We use this to measure campaign effectiveness and optimize advertising (Article 6(1)(a) GDPR, consent). - Online quote: when we send you a quote as a link, we record the date it was opened and the type of device used. If you accept the quote or ask a question, we also record your name, contact details, selected options, the question and its date. We use this information to prepare and enter into a contract (Article 6(1)(b) GDPR). The quote can only be opened through a link with a unique code and is not indexed by search engines.
- Email and phone correspondence: information you provide in a message. We use it to handle correspondence (Article 6(1)(f) GDPR, legitimate interest).
- Working with us: information needed to issue an invoice and complete the project (Article 6(1)(b) and (c) GDPR).
- Form protection: we do not store your IP address directly. We store only a one-way hash so we can limit submission frequency and protect forms from spam (Article 6(1)(f) GDPR, legitimate interest).
Providing data is voluntary, but we cannot respond without an email address or phone number. Consent to analytics and advertising measurement is voluntary and does not affect how the website works or your ability to contact us.
How long we keep data
We keep inquiries that do not lead to a project for up to 12 months after the last contact. We keep information connected with projects and invoices for the period required by tax and accounting laws. We keep user and event data in Google Analytics and Meta for the period configured in those services, no longer than 14 months.
Who receives data
Data may be shared with service providers we use to operate the studio: email and calendar services (Google Workspace), website analytics (Google Analytics), advertising measurement (Meta Platforms), the appointment-booking system, website hosting and our accounting office. They process data on our behalf. These providers may process data outside the European Economic Area under standard contractual clauses or a European Commission adequacy decision.
Your rights
You have the right to access, correct, erase and restrict the processing of your data, to data portability, and to object to processing based on legitimate interest. You can withdraw analytics consent at any time through the “Privacy settings” link in the footer. Withdrawal does not affect the lawfulness of processing carried out before it. You may also lodge a complaint with the President of the Polish Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Cookies and browser storage
Before you consent, Google Analytics and Meta Pixel code is not downloaded and no analytics or advertising data is sent. After consent, Analytics may store identifiers in cookies whose names begin with _ga, while Meta Pixel may store _fbp and, after an ad visit, _fbc. We save your consent choice locally in the browser so we do not ask on every page view. After you withdraw consent, we stop further measurement and remove measurement cookies available to the website.
The company name entered for the brand preview, selected services in “Your quote,” and the last project viewed in the work carousel are remembered only in the current browser tab through sessionStorage. They are not sent to us unless you submit a brief and disappear when you close the tab.
Fonts and external content
The website uses Bricolage Grotesque, Fraunces, Montserrat and Sedgwick Ave. The font files are hosted on our server, so your browser does not connect to Google Fonts. Links to Behance, Instagram, Facebook and Messenger lead to services with their own privacy policies.
Changes
Last updated: October 12, 2026.