Privacy Policy

1. Who this policy covers

This Privacy Policy explains how Langford Montage handles personal information connected with its website, business inquiries and remotely delivered advertising creative and media content services. The studio was established on September 30, 2026. Our contact details appear at the end of this policy.

This policy concerns our handling of information as a business. When a client provides material solely for processing on its instructions, the client may be responsible for the underlying collection and its own privacy notices. We will agree any necessary confidentiality or data-processing requirements before handling such material.

Our services concern campaign messages, story sequences, creative variants, cross-format assets and audience message references. We do not need banking credentials, payment card numbers, identity documents, sensitive consumer profiles or individual-level advertising databases to provide the listed starter services.

2. Current inquiry interface

The project inquiry interface currently displays an on-page confirmation locally in your browser. The custom form does not transmit its entries to our email inbox or a server, does not create a customer account and does not charge a payment method. The displayed confirmation is not evidence of a paid order or an accepted services contract.

Text entered in the form is temporarily present in the open page. Our custom code does not save the entries in cookies, browser local storage or a remote database. After local validation succeeds, the form is reset. Your own browser may offer autofill or maintain form state according to its settings, and that browser behavior is outside our custom form code.

If you contact us independently using the email address, phone number or postal address shown on the website, we may receive the information you choose to provide. This policy applies to that information. We will update the policy before introducing a connected inquiry form or other materially different collection process.

3. Information you provide directly

Business inquiries and project communications may include your name, business contact details, organization, role, selected service, campaign goals, project instructions, feedback and correspondence. We use these details to understand the request, communicate with an authorized contact and administer any accepted work.

For an accepted project, we may retain the agreed proposal, approval history, invoice references, payment status and delivery records. We do not ask for full card details through the website inquiry interface. A separate authorized payment provider may handle payment information under its own arrangements if a project payment is made through that provider.

Please share only information needed for the creative brief. Where possible, replace personal information in example materials with anonymous content. Do not send sensitive health, biometric, financial account, government identification or children’s information unless we have expressly agreed a lawful and appropriate handling process.

4. Technical website information

Because the website is hosted on Shopify, Shopify and infrastructure providers may process technical information needed to deliver and protect the storefront. This can include internet protocol address, device and browser information, access times, requested pages, approximate region and technical error or security signals.

The custom creative sections do not install advertising pixels, third-party analytics libraries or behavioral profiling tools. They load images and locally hosted font files and run display features such as a menu, appearance animations and review rotation. These display features do not create a separate visitor profile or save a project inquiry.

Platform cookies, analytics and apps depend on the live store’s Shopify settings and any integrations enabled by the store operator. The Cookie Policy explains the relevant categories and choices. We do not claim that the underlying Shopify platform is entirely free of cookies or technical processing.

5. Purposes for using information

We use received inquiry and project information to answer questions, evaluate a creative brief, prepare a quotation, deliver agreed services, manage revisions, organize file handover and maintain business records. We may also use limited information to investigate a technical issue, prevent misuse, resolve a dispute or meet legal obligations.

We do not use a project contact list to operate an affiliate network, administer an advertising budget or conduct payment processing on behalf of another business. Audience Message Mapping focuses on the segments and needs defined in the project brief; it is not a request to share named consumer lists.

We do not treat agreement to be contacted about a project as consent to an unrelated marketing list. If promotional communications are introduced, the collection and choice process will be explained separately and recipients will be given an appropriate way to stop receiving them.

6. Grounds for processing

Where applicable law requires a legal basis, we may process information to take requested steps before a contract, perform an accepted services agreement, meet a legal obligation or pursue a legitimate business interest such as answering an inquiry and protecting the website. Any reliance on legitimate interests is subject to the individual’s rights and reasonable expectations.

Where a particular activity requires consent, we will seek that consent and provide a way to withdraw it. Withdrawing consent applies going forward and does not change processing that was lawful before withdrawal. A project inquiry checkbox does not authorize every possible use of information.

The precise rights and legal requirements depend on the location of the person, the nature of the activity and the applicability of the law. We do not assume that every statutory privacy framework applies to every business contact simply because the website is accessible worldwide.

7. Service providers and disclosures

Information may be shared with providers that help host the website, deliver email, store agreed project files, maintain business records or perform another necessary operational task. We limit information shared for a task to what is reasonably needed and seek appropriate contractual and access protections for providers acting on our behalf.

We may disclose information when reasonably necessary to comply with law or a valid legal request, protect rights or security, investigate misuse, or resolve a dispute. If a business reorganization involves relevant records, any transfer should be subject to appropriate safeguards and compatible purposes, with notice when required.

We do not sell customer contact lists or license client project details for unrelated advertising campaigns. In some privacy laws, platform-level data sharing for advertising can be treated as a sale or sharing even without a monetary transaction. Any such applicable platform activity must be assessed against the live store settings and the choices available to visitors.

8. Shopify and platform services

Shopify supplies the hosting platform and may process information as a service provider for the store and, for some platform activities, under its own privacy terms. Its role can vary with the feature used. Shopify’s consumer privacy information and privacy request processes apply to its independent processing.

If Shopify Network Intelligence or related enhanced platform services are enabled, Shopify may use store information together with data from other merchants to support features such as improved storefront performance, personalization and advertising-related services. This does not give other merchants access to our client records. Availability, consent handling and opt-out behavior depend on the enabled features and applicable requirements.

Where nonessential platform processing requires consent or an opt-out, the store’s configured privacy controls should provide the appropriate choices. A request concerning information held solely by Shopify may need to be addressed to Shopify in addition to contacting us. We will explain what we can address within the information and settings under our control.

9. Cookies and similar technologies

Cookies are small data files stored by a browser; similar technologies may store preferences or support technical operation. Necessary platform functions, preference features and optional analytics have different purposes. The custom project form does not create a cookie containing your inquiry.

Where displayed, the store’s consent banner or preference control can explain and manage optional categories. Refusing nonessential cookies should not be interpreted as refusing necessary website operation or as agreement to unrelated advertising. Browser settings also let you inspect, block or delete cookies, although blocking all cookies can affect some platform features.

We do not provide a fabricated list of exact cookie names or retention durations. The actual inventory depends on the live platform and installed apps and must be assessed when those features are configured or changed. Please contact us if you need more information about a cookie you observe on the storefront.

10. Retention and security

We retain received information only for as long as it is reasonably needed for its purpose, including active communications, accepted projects, records required by law and legitimate dispute resolution. A retention period depends on the record type and applicable obligation; we do not promise a single arbitrary period for every kind of information.

Completed project records may be retained to document approvals, delivery and licensing, while redundant source copies should be removed when no longer needed. Tax or accounting records may need to be kept for the legally required period. If a retention request conflicts with a legal obligation, we will explain the relevant limitation.

We use reasonable safeguards suited to the information, including restricted access and the security features of selected service providers. No online transmission or storage method is completely risk-free. If a personal information incident occurs, we will assess and make any notification required by applicable law.

11. International processing

We operate from the United States and provide services remotely. Shopify, email and file infrastructure may process information in the United States or other countries where their services operate. Those countries may have different privacy rules from the country where you are located.

Where applicable law requires a particular transfer safeguard, we will use the appropriate arrangement for the relevant processing. Accessing the website does not, by itself, waive a statutory protection or substitute for a required transfer mechanism. Please contact us with a specific transfer question about an accepted project.

12. Access, correction and other choices

Depending on applicable law, you may have rights to know whether we process your personal information, access it, correct inaccuracies, request deletion, obtain a portable copy, restrict certain use, object to processing or withdraw consent. A request concerning targeted advertising, sale or profiling will be assessed against the activity actually performed and the law that applies.

Please contact projects@langfordmontage.com with the nature of your request and enough information to identify the relevant correspondence or project. We may ask for proportionate verification to avoid disclosing another person’s information. Do not send an identity document unless a specific, necessary and secure verification method has been agreed.

We respond within the period required by applicable law. For a qualifying request governed by the Colorado Privacy Act, that generally means 45 days, with a permitted extension when necessary and the required notice. Some information may be exempt from deletion or disclosure because of legal obligations, another person’s rights or an applicable exemption.

If a privacy law gives you an appeal right and we decline your request, you may reply to the decision and request an appeal. We will explain the outcome and any further complaint route required by that law. You may also contact the competent privacy or consumer protection authority where applicable.

13. Signals, children and policy updates

Where applicable law requires recognition of a universal opt-out signal such as Global Privacy Control, that signal must be assessed for the processing within our control and the platform privacy configuration. A signal does not automatically erase records that must lawfully be retained. The custom creative sections do not perform targeted advertising or cross-site tracking.

The website and services are intended for adult business users, not for children. We do not knowingly seek personal information from children under 13. If you believe a child’s information has been provided to us, contact us so we can assess deletion and any other required action.

We may update this policy when our processes, platform configuration or legal requirements change. The dates at the top identify the current version. We will provide additional notice when required for a material change. New uses that require consent will not be authorized merely by changing this text.