Privacy policy

Who we are

This website is operated by Lenzo Studio L.L.C, trade licence 1524512, registered in Dubai, United Arab Emirates. Web development services described on this site are delivered under White Nine IT L.L.C, trade licence 1165185.

What we collect

We collect only what you choose to send us. When you submit the contact form, we receive your name, email address, and optionally your phone number and company name, along with the service you are enquiring about, an indicative budget band if you select one, and your message.

Our servers also record standard technical information for every request — IP address, timestamp, requested URL and browser user agent — in access logs. These logs exist to keep the service running and to detect abuse.

What we do not do

• We do not use advertising cookies or tracking pixels.
• We do not run third-party analytics that profile you across sites.
• We do not sell, rent or share your personal data with third parties for marketing.
• We do not send marketing email to people who only made an enquiry.

Cookies

This site sets one cookie, named theme, and only when you switch between the light and dark colour schemes. It stores that choice so the page opens in the scheme you picked. It contains nothing that identifies you, it is read by nothing but this site, and it expires after a year. Deleting it simply returns the site to the light scheme.

Every page loads Google reCAPTCHA v3, which scores whether traffic looks automated so that the contact form can refuse bots without asking you to solve anything. To do that Google receives technical information about your browser and device and how you interact with the site, and may set its own cookie on a Google domain. We use the result for one thing — deciding whether a form submission is genuine — and it is governed by the Google Privacy Policy and Terms of Service. If you would rather not use it, every other channel on the contact page — WhatsApp, phone and email — works without it.

Why we process it

Enquiry details are processed for one purpose: to answer you and, if we go on to work together, to deliver the project. Technical logs are processed for security, abuse prevention and service reliability.

Who else is involved

Traffic to this site passes through Cloudflare, which provides TLS encryption, protection against denial-of-service attacks and bot filtering. Cloudflare processes connection metadata on our behalf as part of delivering that protection.

Everything else — the application, the database and the stored enquiries — runs on infrastructure we operate ourselves.

How long we keep it

Enquiries are retained for up to twenty-four months so that we have context if you come back to us, then deleted. Access logs are rotated and retained for up to ninety days.

How we protect it

All traffic is encrypted in transit. The database is reachable only from the application server itself and never from the internet. Access to stored enquiries is limited to the two directors of the studio.

Your rights

You can ask us what personal data we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to [email protected] and we will respond within thirty days.

Changes

If our practices change, this page changes with them and the date at the top is updated. There is no separate archive; the version published here is the current one.