PRIVACY POLICY

Last updated: May 15, 2026

Ligaya Interiors is committed to protecting your personal information and being transparent about how it is used. This policy explains what data we collect, why we collect it, how it is stored, and your rights in relation to it.

Who We Are

Ligaya Interiors is an interior design and family counseling consultancy operated by Sheila Schlager, based in Lusaka, Zambia. For the purposes of this policy, "we", "us", and "our" refer to Ligaya Interiors. You can contact us at hello@ligayainteriors.com.

What Data We Collect and Why

If you send us enquiries using our contact form, your information on the contact form including the contact data you state therein are saved and processed by us to process your enquiry and for any subsequent questions. Your data is exclusively used to reply to and process your question. In this case, data is processed according to Article 6 section 1 (S. 1) letter a of the GDPR based on permission voluntarily issued.

You can object to this at any time (right of revocation).

When you purchase a publication through our website, you will be directed to Payhip, an external platform that processes your transaction and delivers your download. Payhip collects and manages your purchase data in accordance with their own privacy policy, which we encourage you to review. Ligaya Interiors retains only your email address and the publication purchased, solely for the purpose of crediting publication purchases against future design service fees.

When you purchase a publication or service through Payhip, your payment is processed by a provider of your choice. We do not store your payment card details. We retain a record of your transaction - including your name, email address, purchase amount, and date - for invoicing, accounting, and service credit purposes.

Legal Basis for Processing

For visitors in the European Union and United Kingdom, we process your personal data on the following legal bases under GDPR and the UK GDPR respectively: your consent, where you have provided it; the performance of a contract, where processing is necessary to deliver a service you have requested; and our legitimate interests, where we have a genuine business reason that does not override your rights, such as responding to an enquiry.

Ligaya Interiors uses Article 6 (S. 1) letter a of the GDPR as the legal basis for processing data for which we received permission for a specific processing purpose. If personal data has to be processed in order to comply with a contract for which the contractual partner is the affected person, as is the case, for example, when processing the data required to deliver goods or provide a service for compensation, this processing is based on Article 6 (S. 1) letter b of the GDPR. This also applies for processing that is needed to perform pre-contractual activities, such as enquiries concerning our products or services. If Ligaya Interiors is subject to a legal obligation which makes processing personal data necessary, for example to fulfil fiscal obligations, processing is based on Article 6 (S. 1) letter c of the GDPR. In rare cases, processing personal data may be required in order to protect vital interests of the affected person or another private individual, Article 6 (S. 1) letter d of the GDPR. Finally, processing can also be based on Article 6 (S. 1) letter f of the GDPR. This legal basis is used for processing which is not covered by any of the other legal bases if processing is required to uphold a justified interest of Ligaya Interiors or a third party to the extent that the affected party’s interests, basic rights and basic freedoms are not more important.

Data Storage and Security

Client files, project documents, and correspondence are stored using Proton, which is based in Switzerland and operates under Swiss data protection law, providing a level of protection equivalent to GDPR standards. We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure.

Please note that our website is hosted on Squarespace, a US-based platform. Squarespace maintains EU-US data transfer safeguards in accordance with applicable law. For more information, refer to Squarespace's own privacy policy.

If you access our website or call up a file, data concerning this action is stored in a log file on our web server. The following individual items of data can be stored:

  • IP address (if possible this is saved in a disguised version)

  • Domain name of the website from which you came

  • Name of the files called up

  • Date and time these were called up

  • Name of your Internet service provider

  • as well as, as the case may be, the operating system and browser version on your end device

We only save IP addresses for reasons of data security in order to ensure the stability and security of our system (legal basis: Article 6 (1) letter f of the the GDPR). We reserve the right to analyse statistics for disguised data records.

How Long We Keep Your Data

Enquiry data is retained for 3 months from the date of first contact if no project proceeds. Client project records are retained for 5 years following project completion for accounting and professional purposes. You may request earlier deletion subject to any legal retention obligations.

Cookies

Our website uses cookies set automatically by Squarespace to ensure the site functions correctly. These may include session cookies and analytics cookies. We do not use additional third-party tracking or advertising cookies. You can manage cookie preferences through your browser settings.

Sharing Your Data

Your personal data is not passed on to third parties for any purposes other than those listed below. We only pass on your personal data to third parties if:

  • You have provided your express permission for this according to Article 6 (1) Sentence 1 letter a of the GDPR,

  • Passing this data on according to Article 6 (1) Sentence 1 letter f of the GDPR is required to assert, exercise or defend legal entitlements and there is no reason to assume that you have a more important interest that requires protection for your data not to be passed on,

  • In the event that there is a legal obligation for passing data on according to Article 6 (1) Sentence 1 letter c of the GDPR, as well as this being legally permissible and required for processing contractual relationships with you according to Article 6 (1) Sentence 1 letter b of the GDPR.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only where necessary to deliver our services - with our eCommerce provider Payhip to complete transactions, and with cloud storage provider Proton to maintain project records. All third-party providers are required to handle your data securely and in accordance with applicable law.

Links to other websites

Our website can include links to third-party websites or other of our websites. If you follow a link to one of these websites, please note that these websites have their own data protection policies and that we do not accept any responsibility or liability for these policies. Please check these data protection policies before you pass on personal data to these websites.

SSL encryption

This website uses SSL encryption (Secure Socket Layer) for transferring data from your browser to our servers and to servers which provide information and we include in our website. Data is transfer with encryption using SSL. This data cannot be changed and the sender can be identified. You can recognise the presence of SSL encryption by the "https" prefix before IP addresses for websites you call up using your browser.

Security notice

We secure our website and other IT systems using suitable technical and organisational activities to prevent loss, destruction, unauthorised access, unauthorised changes and the unauthorised processing of your data. However, it is practically impossible to fully protect your data from all risks in all cases despite the greatest of care. Because we cannot guarantee full data security for email communication, we recommend that confidential information is sent by post.

Rights of affected parties

Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict how we process your data, and request a portable copy of your data. To exercise any of these rights, please contact us at hello@ligayainteriors.com. EU and UK residents may also lodge a complaint with their national data protection authority.

You have the right:

  • to demand information on your personal data which I process according to Article 15 of the GDPR. In particular, you can demand information on the processing purpose, the category of the personal data, the categories of recipients to whom your data is or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data to the extent that this was not collected by me, and the existence of automated decision making including profiling and, as the case may be, meaningful information on the details;

  • to demand the immediate correction of incorrect personal data stored by me or the completion of this data according to Article 16 of the GDPR;

  • to demand that your personal data that I have stored be deleted according to Article 17 of the GDPR to the extent that processing is not required to exercise the right to freely express an opinion and the freedom of information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend against legal claims;

  • to demand that processing of your personal data is restricted according to Article 18 of the GDPR to the extent that you dispute that your data is correct, processing is illegal, you reject the deletion of this data and we no longer require the data, however you need this data to assert, exercise or defend against legal claims or you have filed an objection to processing according to Article 21 of the GDPR;

  • to demand that your personal data which you have provided me with are maintained in a structured, accessible and machine-readable format or that this is passed on to another responsible party according to Article 20 of the GDPR;

  • to revoke any permission you may have granted me with at any time according to Article 7 (3) of the GDPR. This means that we may not continue to process the data that is based on this permission in future, and to file a complaint with a supervisory authority irrespective of any other appeal under administrative law or a judicial remedy according to Article 77 of the GDPR. As a rule, in this regard, you can consult the supervisory body at your usual address or place of work, or the place at which the purported violation took place if the affected person is of the opinion that processing their personal data violates the EU’s general data protection regulation (GDPR).

Australian Residents

If you are based in Australia, your personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You have the right to contact us at hello@ligayainteriors.com to exercise any of the following rights:

  • to request access to the personal information we hold about you, including the types of information held, the purposes for which it is held, and how it has been used or disclosed, in accordance with APP 12;

  • to request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading, in accordance with APP 13;

  • to request that we explain how we collect, hold, use, and disclose your personal information, including whether it is disclosed to overseas recipients and in which countries those recipients are located, in accordance with APP 1 and APP 8;

  • to withdraw consent to the collection or use of your personal information where processing is based on consent, with the understanding that withdrawal may affect our ability to provide services to you;

  • to request that we delete or de-identify your personal information where it is no longer necessary for the purpose for which it was collected, subject to any legal obligation we may have to retain it.

If you believe that we have mishandled your personal information or breached the Australian Privacy Principles, you are entitled to lodge a complaint with us directly in the first instance at hello@ligayainteriors.com. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, which has the authority to investigate privacy complaints and make determinations.

Canadian Residents

If you are based in Canada, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. The rights described in this policy — including access, correction, withdrawal of consent, and complaint — reflect the fair information principles that underpin Canadian privacy law. If you have a concern about how your personal information has been handled, you may contact us at hello@ligayainteriors.com. If you are not satisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

Changes to this data protection declaration

We reserve the right to change this data protection declaration if the legal situation or this online offering or the type of data collection changes. However, this only applies with regard to declarations for data processing. To the extent that the user’s permission is required or if parts of the data protection declaration include regulations for a contractual relationship with users, the data protection declaration has only changed with user’s permission. As a result, if required, please obtain information on this data protection declaration, in particular if you pass on personal data.

Contact

If you have any questions concerning the collection, processing or use of your personal data, for information, correction, blocking or the deletion of data as well as cancelling any permission granted or objecting to a specific use for the data, please contact: hello@ligayainteriors.com.