Lens & Lemon
Privacy Policy

Effective Date: 10/08/2025

Lens & Lemon (“we”, “us”, “our”), a global content marketing agency, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website (the “Site”) or engage with our services. It applies to individuals in the European Economic Area (EEA), the United Kingdom, the United States (including California), and other jurisdictions where we operate.

Separate Policies: This Privacy Policy covers our general data‑processing practices. Our use of cookies and similar technologies is covered in a separate Cookie Policy, and our service terms are set out in Terms & Conditions.

1. Who We Are

Lens & Lemon is a content marketing agency serving clients across EMEA and the USA, and partnering with technology companies globally.

The data controller is Daria Zydroń-Robakowska, conducting business under the brand Lens & Lemon, with its registered address at ul. Leszka 16A, 72-006 Mierzyn, Poland, Company ID: 851-287-19-95. 

For privacy‑related queries, you can contact us at privacy@lensandlemon.com.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact details: names, email addresses, phone numbers, company names, job titles, and postal addresses.
• Communications: the content of emails, messages or other communications you send to us and any attachments you include.
• Website usage data: IP addresses, browser type and version, device information, referring URLs, pages visited, time spent on pages, interaction data, and other diagnostic data collected automatically when you use our Site.
• Marketing and analytics data: information about your interactions with our newsletters, marketing emails, and online advertisements, collected via tracking pixels, tags, and analytics tools.
• Data from third‑party integrations: information we receive from service providers (e.g., CRM systems, social‑media platforms, or analytics providers) as part of our operations.

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health information, or data about children). If you believe we have collected such data inadvertently, please contact us immediately so we can delete it.

3. How We Collect Data

We collect personal data in the following ways:

1. Directly from you: when you fill out our contact forms, request a proposal, subscribe to our newsletters, participate in surveys, or communicate with us via email or phone.
2. Automatically: through cookies, tracking pixels, and other similar technologies that collect usage data when you interact with our Site. Our separate Cookie Policy explains how we use cookies and how you can control them.
3. From third‑party sources: if you interact with our content on social media or use third‑party login services, we may receive certain profile information subject to your privacy settings on those platforms. We may also obtain business contact details from publicly available sources or marketing partners for business‑to‑business outreach.

4. Why We Collect Data (Purposes)

We use personal data for the following purposes:

• To provide and improve our services: including processing requests for proposals, delivering marketing campaigns, responding to inquiries and providing customer support.
• To communicate with you: sending service messages, administrative notifications, updates to our policies and – where permitted – marketing communications such as newsletters or promotional offers.
• For marketing and business development: informing you about our services, industry insights and events you may find relevant, and analyzing the effectiveness of our marketing efforts.
• To personalize your experience: tailoring content on our Site and communications based on your interests and behaviour.
• To improve our Site and services: monitoring and analyzing usage patterns and feedback to enhance our offerings, user experience and security.
• To comply with legal obligations: such as record‑keeping, accounting, tax and regulatory requirements, and responding to lawful requests from public authorities.

5. Legal Bases for Processing

Under the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, we process personal data on the following legal grounds:

• Consent: You have given consent to process your personal data for a specific purpose. For example, you consent when subscribing to a newsletter or accepting cookies.
• Contractual necessity: Processing is necessary to enter into or perform a contract with you, such as providing our marketing services or responding to your request for a proposal.
• Legitimate interests: We process data to pursue our legitimate interests (e.g., marketing our services, improving our website, developing our business) provided that these interests are not overridden by your rights and interests.
• Legal obligations: We may process data as required by law or regulations (e.g., tax or accounting requirements, compliance with court orders).

Under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), we may collect personal information for the purposes described above. We do not sell your personal information. We may share personal information with service providers for business purposes; you can opt out of certain sharing practices (see Section 8).

6. How We Share Personal Data

We may share personal data with the following categories of recipients:

• Internal team: employees, contractors, and affiliated companies who need the data to perform their duties and are subject to confidentiality obligations.
• Service providers: vendors who help us operate our business, such as website hosting providers, email marketing platforms, analytics providers (e.g., Google Analytics), customer‑relationship‑management (CRM) systems, payment processors and IT support. These service providers process data on our behalf under strict contracts.
• Professional advisers: external auditors, accountants, or legal advisers, where necessary for the provision of their services.
• Business transfers: in the event of a merger, acquisition, or other business transaction, your data may be transferred to new owners subject to the terms of this policy.
• Legal compliance: regulators, courts, or law‑enforcement agencies when required to comply with the law or protect our rights, privacy, safety, or property.

We do not sell your personal data to third parties. We may share anonymized or aggregated data that does not identify individuals for analytics or research.

7. International Data Transfers

Lens & Lemon is based in Poland, but we operate globally. Your personal data may be stored and processed outside your country of residence, including outside the European Economic Area (EEA) and the USA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions: transferring to countries recognized by the European Commission or UK government as providing adequate protection.
• Standard Contractual Clauses (SCCs): using approved contractual provisions to protect data transferred to recipients in non‑adequate jurisdictions.
• Additional measures: encryption, pseudonymization, and other technical and organizational measures.

8. Your Rights

8.1 Rights under the GDPR and UK law

If you are located in the EEA or the UK, you have the following rights with respect to your personal data:

• Access: Request confirmation of whether we process your personal data and obtain a copy of that data.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of personal data under certain circumstances (also known as the “right to be forgotten”).
• Restriction: Request limitation of processing under certain circumstances.
• Portability: Request the transfer of your data to another organization or to you, where feasible.
• Objection: Object to processing based on our legitimate interests, including direct marketing. You may object to profiling based on these interests.
• Withdrawal of consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

8.2 Rights under CCPA/CPRA

California residents have rights to:

• Know: Request information about the categories of personal information we collect and the purposes for which we use it.
• Access: Obtain a copy of the specific personal information we hold about you.
• Delete: Request deletion of personal information, subject to certain exceptions.
• Correct: Request correction of inaccurate information.
• Opt‑out: Opt out of the sale or sharing of personal information. Lens & Lemon does not sell personal information, but you may opt out of certain sharing practices used for cross‑contextual advertising.
• Limit use of sensitive personal information: if we collect sensitive personal information, you can request limitation on its use. Lens & Lemon does not use sensitive personal information for any purpose beyond those permitted by law.
• Non‑discrimination: Exercise your rights without receiving different prices or services.

8.3 Exercising Your Rights

To exercise your rights, please send your request to privacy@lensandlemon.com with the subject line “Privacy Request”. We may need to verify your identity before processing your request. If you reside in California, you may also contact us via the following contact form for CCPA requests.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Examples:

• Marketing contacts: kept until you opt out or withdraw consent.
• Client records and contracts: retained for the duration of the business relationship and for a period afterwards to comply with legal obligations (e.g., accounting, tax) or resolve disputes.
• Analytics data: retained according to our analytics provider’s settings (usually 26 months) and then deleted or anonymized.

When data is no longer needed, we securely delete or anonymize it.

10. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure servers, firewalls, and regular security assessments. While we strive to protect your data, no method of transmission or storage is completely secure; therefore, we cannot guarantee absolute security.

11. Cookies and Tracking Technologies

Our Site uses cookies, tracking pixels, and similar technologies to enhance your experience, analyze usage and deliver personalized content. As we maintain a separate Cookie Policy, please refer to that document for detailed information about the cookies we use, the purposes they serve and how you can manage your preferences. You may set your browser to refuse cookies, but some features of our Site may not function properly without them.

12. Children’s Privacy

Our services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 16. If you are a parent or guardian and believe that we have collected personal information about a child, please contact us so that we can delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make changes, we will revise the “Effective Date” at the top of the policy and post the updated policy on our Site. Significant changes may be communicated to you via email or a notice on our website. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

14. Contact Us

If you have questions or concerns about this Privacy Policy, or if you wish to exercise your rights, please contact us at:

Lens & Lemon
Daria Zydroń-Robakowska
ul. Leszka 16A, 72-006 Mierzyn, Poland
Company ID: 851-287-19-95
Email: privacy@lensandlemon.com