Privacy Policy

Last updated: 6 August 2026

1. Who we are

NorthLens Studio is a trading name operated by Aayush Rai as an independent sole trader in the United Kingdom.

1 Bateson Street, London, SE18 1DA, United Kingdom
Email: info@northlensstudio.co.uk · Telephone: +44 7867 527009

NorthLens Studio is the data controller for personal information processed through this website.

2. Information we collect

We keep the information we collect to the minimum needed to answer enquiries and fulfil purchases.

Contact details you send us — your name, email address, chosen subject and the content of your message when you use the contact form or email us.
Checkout information — the email address you enter at Stripe Checkout, and the billing details Stripe collects to process the payment.
Payment-verification information — the Checkout Session identifier, payment status, package purchased, amount and order reference returned by Stripe when we verify a payment.
Support communication — correspondence relating to your enquiry, purchase, delivery or complaint.
Webhook records — minimal event records written when Stripe notifies us that a payment has succeeded, expired or failed.
Protected server logs — standard hosting logs and a small internal payment-event log, both stored in a location that is not publicly accessible.

NorthLens Studio does not directly collect or store customers' full payment-card details. Payments are processed through Stripe Checkout.

We do not publish raw webhook data, and our internal records store truncated identifiers rather than complete payloads.

3. Why we process your information

To reply to enquiries and provide support.
To verify that a payment has genuinely been completed before showing order details.
To prepare and send digital access or setup instructions for the package purchased.
To investigate duplicate payments, delivery problems, refund requests and complaints.
To keep accurate business and tax records.
To protect the website against fraud, abuse and misuse.

4. Lawful bases

Contract — processing needed to supply the package you have purchased and to handle related support.
Legitimate interests — responding to enquiries, keeping minimal payment-event records, and protecting the website and business from fraud and abuse.
Legal obligation — retaining transaction records for accounting and tax purposes.
Consent — optional cookie preferences, and any marketing communication you specifically request.

5. Third-party processors

We use a small number of established providers:

Stripe Payments Europe / Stripe, Inc. — payment processing, Checkout, receipts and refunds.
Hostinger — website hosting, email and server logs.
Email service used for business correspondence — delivery of replies and digital access instructions.

Each provider processes information under its own privacy terms. Where information is transferred outside the UK, appropriate safeguards such as standard contractual clauses are relied upon by those providers.

6. Data retention

Enquiry correspondence: normally up to 24 months from the last contact.
Purchase and payment-verification records: retained for at least six years for accounting and tax purposes.
Payment-event log entries: normally up to 12 months.
Hosting logs: retained according to the hosting provider's standard retention period.

7. Your rights

Under UK data protection law you may ask us to:

confirm what personal information we hold about you and provide a copy;
correct information that is inaccurate or incomplete;
delete information where we no longer have a lawful reason to keep it;
restrict or object to certain processing;
provide your information in a portable format where applicable;
withdraw consent where processing is based on consent.

Send requests to info@northlensstudio.co.uk. We aim to respond within one calendar month. If you are not satisfied with our response, you may complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

This website uses essential cookies and local storage only, together with an optional preference setting. No analytics or advertising tools are installed. See the Cookie Policy for detail.

9. Security

Access to the site is served over HTTPS, payment credentials are stored in a protected server-side configuration file that is not reachable from the web, and internal payment logs are kept outside the publicly served directories. No online service can be guaranteed to be completely secure, but we take reasonable technical and organisational measures appropriate to a small business.

10. Changes to this policy

We may update this policy as the business or its providers change. The 'last updated' date at the top of the page always reflects the current version.

11. Contact