Privacy policy
What data lsf-design.studio collects, why, how long we keep it and what your rights are — in plain words, no small print.
Last updated: 11 November 2026.
1. Who processes your data
The data controller is lsf.design, Belgrade, Serbia. For any privacy question, email us at hello@lsf-design.studio.
2. When you contact us through the form
What data: your name, company name, email, phone (if you provide it), type of business, website goal and your message. We also record the language and the page you sent the inquiry from, and your IP address.
Why: to answer your inquiry, agree on the first version of your website and send you a confirmation that we received it. We use the IP address only to protect the form from abuse (limiting the number of inquiries).
Legal basis: steps taken at your request before possibly entering into a contract (Art. 12(1)(2) of the Serbian Law on Personal Data Protection; Art. 6(1)(b) GDPR). For the IP address — our legitimate interest in protecting the form from abuse (Art. 12(1)(6); Art. 6(1)(f) GDPR).
What happens to your inquiry: it is stored on our server and forwarded to us as an email and as a short notification in our Telegram app. We send one automatic confirmation to the address you entered — at most one every 24 hours per address.
How long: up to 12 months from our last contact if we don't start working together. If we do, we keep it for as long as we work together and as long as the law requires (for example accounting rules).
3. Analytics — only with your consent
We use Google Analytics 4 to see how the site is used: which pages are visited, from which device and browser, from which country or city (approximately), where the visit came from, which buttons are used and whether an inquiry was sent (without the form's content). Google Analytics 4 does not store IP addresses.
Analytics cookies are set only after you click “Accept”:
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Telling visitors apart | 2 years |
_ga_05PQ08KFD4 | Remembering the state of a visit | 2 years |
If you click “Decline”, no cookies are set. Google may then receive only basic signals about the visit, without cookies and without identifiers, which it uses for aggregate statistics. Google Analytics keeps detailed event data for 2 months.
Legal basis: your consent (Art. 12(1)(1); Art. 6(1)(a) GDPR). You can withdraw it at any time with the “Cookie settings” link at the bottom of every page — the analytics cookies are then deleted too.
Provider: Google Ireland Limited. Data may be transferred to the USA (see section 6).
4. What your browser remembers
Your cookie choice (“accepted” or “declined”) is kept in your browser's local storage under the name lsf-consent, so we don't ask you on every page. It is not sent anywhere and stays until you clear it.
5. Technical data and external services
- Server logs: like any website, our server briefly records the IP address, time, requested page and browser type — for security and troubleshooting. Logs are deleted automatically as newer ones replace them.
- Fonts and animations: fonts are loaded from Google Fonts (Google) and the animation library from cdnjs (Cloudflare). To download them, your browser connects to their servers, so they see your IP address. They do not set cookies.
Who we work with (processors): Hostinger (website server and email), Postmark / ActiveCampaign (email delivery), Telegram (internal notification of a new inquiry) and Google (analytics and fonts). We do not sell your data, use it for advertising or make automated decisions about you.
6. Transfers outside Serbia
Some of these providers process data in the European Union and in the United States. Transfers rely on the safeguards these providers apply, such as standard contractual clauses and the EU–US Data Privacy Framework.
7. Your rights
You have the right to access your data, have it corrected or deleted, restrict its processing, receive it in a portable form and object to processing. You can withdraw your analytics consent at any time. Email us at hello@lsf-design.studio — we reply within 30 days at the latest.
If you believe we don't process your data lawfully, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia, www.poverenik.rs. If you live in the European Union, you can also contact the supervisory authority in your country.
8. Changes to this policy
If we change how we process data, we will update this page and the date at the top.