Privacy Policy
Effective date: 1st October 2026
Last updated: 1st October 2026
At Red Lobster Studio, creativity is our thing, but protecting your personal information is just as important. Whether you're exploring our website, getting in touch about a project or working with us through a design subscription, we want you to understand what happens to your information and how we keep it safe. This Privacy Policy explains what personal data we collect, why we use it, who we may share it with and the choices you have regarding your information.
1. Who We Are
Red Lobster Studio is a multidisciplinary creative design studio based in Spain, providing subscription-based design services to businesses and organisations. For the personal data we collect and use for our own business purposes, Red Lobster Studio acts as the data controller.
Business name: Red Lobster Studio
Email: info@redlobster.studio
Website: redlobster.studio
If you have any questions about this policy or how your personal information is handled, you can contact us using the
details above.
2. Personal Information We Collect
The information we collect depends on how you interact with Red Lobster Studio.
2.1 Information You Share With Us
When you contact us, enquire about our services or become a client, we may collect:
Your name and professional contact details
Company name, job title and business information
Email address and telephone number
Details of your enquiries, design briefs and project requirements
Billing details, invoicing information and payment records
Messages, feedback and other information you choose to share with us
We only ask for information that is relevant to providing our services, managing our business relationship or responding to your enquiry.
2.2 Information Collected Through Our Website
When you visit our website, certain technical information may be collected through our hosting infrastructure, security systems or cookies. Depending on the technologies enabled, this may include:
IP address and approximate geographic location
Browser and device information
Operating system
Pages visited and interactions with our website
Referral sources
Date and time of visits
Technical errors and security-related information.
We use this information to maintain website security, understand performance and improve the visitor experience. Where analytics or tracking technologies require consent, we will ask for your permission before activating them.
2.3 Information From Other Sources
We may receive professional contact information from publicly available business websites, professional networking platforms, referrals or business partners. This may include your name, professional role, company and publicly available business contact details. Where we use such information, we will do so in accordance with applicable data protection and electronic marketing laws.
3. Why We Use Your Information
We process personal data for specific business purposes, including:
Responding to enquiries: Answering questions, providing information about our services and preparing proposals
Providing creative services: Managing design requests, communicating about projects, receiving feedback and delivering completed work
Managing subscriptions: Administering subscription plans, monitoring design hours, processing renewals and handling account changes
Payments and accounting: Preparing invoices, recording transactions and meeting tax and financial reporting obligations
Client communication: Sharing project updates, delivery information, important service notices and contractual communication
Improving our website: Understanding website performance, resolving technical issues and improving usability
Business development: Contacting relevant business representatives about our services where legally permitted
Security and legal compliance: Protecting our systems, preventing misuse, maintaining business records and complying with legal obligations
We do not use your personal information for purposes that are incompatible with those described in this policy without an appropriate legal basis.
4. Our Legal Bases for Processing
Under the EU General Data Protection Regulation (GDPR), personal data must be processed on a valid legal basis. Depending on the circumstances, we rely on:
Contractual necessity: When processing is necessary to enter into or perform a contract with an individual, including where applicable a sole trader or individual client
Legitimate interests: When processing is necessary for our legitimate business interests, such as responding to business enquiries, maintaining website security, managing professional relationships or improving our services, provided these interests are not overridden by individuals' rights and freedoms
Consent: Where you have given permission for a particular activity, such as non-essential cookies or marketing communications requiring consent
Legal obligations: When processing is required to comply with applicable laws, including accounting, tax and regulatory requirements
Where a client is a company, processing its employees' business contact details for account administration and service delivery will generally rely on legitimate interests rather than contractual necessity. We assess the appropriate legal basis for each processing activity.
5. Information Used During Design Projects
As part of our creative services, clients may provide materials containing personal information.
These could include photographs, names, employee details, customer testimonials, video footage or information intended for marketing materials. When clients provide personal data for inclusion in design projects, they are responsible for ensuring that they have an appropriate legal basis and any necessary permissions to share and use that information.
Depending on the circumstances, Red Lobster Studio may act as a data processor on behalf of the client. Where required, we will enter into a separate Data Processing Agreement setting out the responsibilities of both parties. We will use personal data contained in client project materials only for the agreed purposes and in accordance with applicable instructions and legal requirements.
6. Who We Share Information With
We do not sell personal data. To operate our business and deliver our services, we may share relevant information with trusted external providers. These may include:
Creative collaborators
Designers, animators, developers and other specialists who assist with client projects
Website and technology providers
Companies providing website hosting, cloud storage, email, project management, communication and security services
Payment and accounting providers
Services that help us manage subscription payments, invoices, financial records and accounting obligations
Professional advisers
Accountants, legal advisers and other professionals where necessary
Public authorities
Regulators, courts, tax authorities or other organisations where disclosure is legally required
We limit access to personal information to what is reasonably necessary and use appropriate contractual and security safeguards. Some providers act as independent data controllers rather than processors, depending on the services they provide.
7. Freelancers and External Creative Tools
Our multidisciplinary services may involve working with independent creative professionals or using specialist design and collaboration software. Where necessary, we may share project information with authorised collaborators so they can complete agreed tasks. We require collaborators to handle confidential information appropriately and comply with applicable data protection obligations.
We may use third-party platforms for design, animation, file sharing, project management and communication. Where personal data is processed through these services, we assess the relevant privacy arrangements and safeguards.
We do not intentionally submit confidential client personal data to public generative AI services for model training without appropriate authorisation and a valid legal basis.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support essential functionality, remember preferences and, where enabled, analyse website usage. Some cookies are necessary for the website to function, while others require your consent.
You can manage your preferences through our cookie consent controls, where applicable. For more information about the cookies we use, their purposes and how to manage them, please read our separate Cookie Policy.
9. Marketing Communications
From time to time, we may share information about Red Lobster Studio, including creative services, studio updates or relevant business opportunities. We may contact existing clients or prospective business contacts where permitted by applicable electronic marketing and data protection laws.
Where consent is required, we will obtain it before sending marketing communications. You can opt out of marketing communications at any time by using an unsubscribe option where provided or contacting us at info@redlobster.studio.
Opting out of marketing does not prevent us from sending necessary communications about an active subscription, project
or invoice.
10. How Long We Keep Your Information
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements. Our retention practices include:
Client and subscription records: Retained during the business relationship and afterwards where necessary to manage legal obligations, contractual claims or disputes
Invoices and financial records: Retained for the periods required by applicable Spanish tax, accounting and commercial legislation
Project files and communications: Retained for as long as needed to provide services, manage ongoing projects and protect legitimate business interests, subject to agreed confidentiality and deletion obligations
General enquiries: Retained for a reasonable period to respond to the enquiry and manage relevant follow-up communications
Marketing information: Retained while there is a valid basis for marketing communications, subject to your right to object or withdraw consent
Website analytics: Retained according to the applicable technology settings and the information provided in our Cookie Policy
11. Keeping Your Information Secure
We take reasonable technical and organisational steps to protect personal information against unauthorised access, accidental loss, alteration or disclosure. Depending on the systems involved, these measures may include:
Access controls and account authentication
Secure storage and communication tools
Restricted access to confidential client materials
Appropriate confidentiality obligations for collaborators
Software updates and security maintenance
Secure handling and disposal of personal information
Although we work to maintain appropriate security, no internet-based service or electronic storage system can guarantee absolute protection. If a personal data breach occurs, we will assess it and make any notifications required by applicable law.
12. International Data Transfers
Red Lobster Studio is based in Spain and may work with clients, collaborators and technology providers in different countries. In some circumstances, personal information may be accessed or processed outside the European Economic Area (EEA). Where international transfers are subject to GDPR restrictions, we will use an appropriate transfer mechanism, such as an adequacy decision or approved Standard Contractual Clauses, together with any additional safeguards required. You may contact us for further information about the safeguards relevant to your personal data.
13. Your Data Protection Rights
Under applicable data protection legislation, you may have the right to:
Access: Request information about the personal data we hold about you
Rectification: Ask us to correct inaccurate or incomplete information
Erasure: Request deletion of personal data where the legal conditions are met
Restriction: Ask us to limit certain processing activities
Objection: Object to processing based on legitimate interests, including direct marketing
Portability: Request certain personal data in a structured, commonly used, machine-readable format where applicable
Withdrawal of consent: Withdraw previously granted consent at any time, without affecting processing already carried out lawfully. Automated decision-making: Exercise applicable rights relating to decisions based solely on automated processing that produce legal or similarly significant effects. To exercise any of these rights, contact info@redlobster.studio.
We may need to verify your identity before responding to a request. We will respond within the periods required by applicable law, normally within one month, subject to permitted extensions. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), through www.aepd.es.
14. Children and Our Services
Red Lobster Studio provides professional creative services intended for businesses and adult representatives. Our website and subscription services are not directed towards children, and we do not knowingly collect children's personal information directly through our business enquiry or subscription processes. Where client projects legitimately involve images or other personal data relating to children, we will process that information in accordance with applicable law, the client's lawful instructions and any required additional safeguards. If you believe that personal information relating to a child has been collected or used inappropriately, please contact us.
15. External Website and Services
Our website may contain links to third-party websites, social media platforms or external services
These websites operate independently and may have their own privacy policies and data handling practices
We encourage visitors to review those policies before providing personal information to third parties
Red Lobster Studio is not responsible for the independent privacy practices of external websites
16. Changes to This Privacy Policy
We may update this Privacy Policy as our business develops, our website changes or legal requirements evolve. Any updated version will be published on our website with a revised last-updated date. Where required by law, we will provide additional notice or obtain consent before making material changes to how personal data is processed.
16. Contact Us
If you have questions about this Privacy Policy, want to exercise your data protection rights or have concerns about how your information is handled, please get in touch.
Email: info@redlobster.studio
Website: redlobster.studio
You can also contact the Spanish Data Protection Agency at https://www.aepd.es.
