Protecting your personal information is important to us. This Privacy Policy explains what Studio OAX collects through studio-oax.com, why we collect it, how long we keep it, and the rights you have over it.

01. Who we are
Studio OAX is the trading name of Lara Galka, a sole trader based in Lisbon, Portugal. We are the data controller for the personal data described in this policy. For anything privacy-related, email us at hello@studio-oax.com.

02. What we collect and why
We only collect what we need to reply to you, work with you, and run the website well.

Project enquiries
When you fill in our enquiry form (powered by Dubsado), we collect your name, email, the services you're interested in, your budget and timeline. We use this to reply to your enquiry and prepare a proposal, as a step you've asked us to take before a contract. If no project goes ahead, we keep it for up to 12 months.

Newsletter and free resources
When you sign up for our newsletter or download our Brand Starter Kit or Pricing Guide (via Kit), we collect your email address and first name. We use this to send you the resource and our newsletter, based on your consent. We keep it until you unsubscribe, and may remove long-inactive subscribers.

Discovery calls
When you book a call via Calendly, we collect your name, email and any answers you share when booking. We use this to schedule and prepare for our call, as a step you've asked us to take before a contract. If no project goes ahead, we keep it for up to 12 months.

Template purchases
When you buy a template (via Stripe), we collect your name, email, billing details and purchase record. We use this to process your order, deliver your template and issue an invoice, to fulfil our contract and meet our legal obligations. Invoices and accounting records are kept for the period required by Portuguese tax law, currently ten years.

Client projects
When we work together, we keep your contact details, project information, contracts and invoices to deliver the agreed work. We keep these for the duration of the project, then retain accounting records for the legally required period.

Technical logs
Our website host records IP addresses and browser information to keep the site secure and running, based on our legitimate interest in a secure website. These logs are kept for short periods, as set by our host.

We never see or store your card details. Payments are handled securely by Stripe.

03. Newsletter and free resources
Our newsletter uses double opt-in: after signing up, you'll receive an email asking you to confirm. When you download a free resource like our Brand Starter Kit or Pricing Guide, you'll also join our newsletter. Every email includes an unsubscribe link, and you can leave at any time.

Sending us a project enquiry or booking a call does not add you to our newsletter.

04. Who we share your data with
We do not sell your personal data or share it with advertisers. We use a small number of trusted service providers to run the studio, who process data on our behalf and only for the purposes above:

Showit – website hosting, including our Instagram feed display
Dubsado – enquiry forms and client management
Kit – newsletter and free resource delivery
Calendly – call scheduling
Stripe – payment processing for template purchases
Outlook – email and file storage

We may also share information with our accountant, or where required by law.

05. International transfers
Some of our providers are based in, or store data in, the United States. Where personal data is transferred outside the European Economic Area, it is protected by the EU-US Data Privacy Framework (where the provider is certified) or by Standard Contractual Clauses approved by the European Commission.

06. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access the personal data we hold about you
  • Have your data corrected or updated
  • Have your data deleted
  • Restrict how we process your data
  • Receive your data in a portable format
  • Object to how we process your data
  • Withdraw your consent at any time, for example by unsubscribing

To exercise any of these rights, email hello@studio-oax.com. We'll respond within one month. If you're unhappy with how we've handled your data, please get in touch first so we can put it right. You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

07. Security
Studio OAX takes reasonable precautions to protect your information. Our providers use industry-standard security, and access to your data is limited to what's needed to work with you. No transmission over the internet is completely secure, so please avoid sending highly sensitive information through our website forms.

08. Children
Anyone is welcome to browse studio-oax.com. Our services and newsletter are designed for adults running businesses, and we do not knowingly collect personal data from children under 13. If you're under 13, please ask a parent or guardian before submitting any information to us.

09. Links to other sites
This site contains links to other websites, including our Instagram profile. Studio OAX is not responsible for the content or privacy practices of those sites, so we recommend reading their privacy policies.

10. Changes to this policy
We may update this policy from time to time. The date of the latest version is shown below. If we make significant changes to how we use your personal data, we'll update the date accordingly.

11. Contact us
We welcome your questions, comments and concerns about your privacy.

Studio OAX by Lara Galka, sole trader
Lisbon, Portugal
hello@studio-oax.com

Last updated: 28/09/2026

Privacy Policy