Legal

Privacy policy.

What is collected, why, and what you can ask me to do about it.

Espejostudio is a trade name and brand operated by Prime Frame LLC, 412 W 7th St, Clovis, NM 88101, United States (“we”, “us”). This policy explains what personal data we collect through this website and when you work with us, why we use it, who we share it with, and what you can ask us to do. Last updated 15 September 2026.

Who is responsible. Prime Frame LLC is the data controller. Contact: [email protected] or +1 (613) 800-7479.

What we collect.

  • When you use the contact form: your name, email, phone number and message. Submissions are stored in this website and sent to our inbox.
  • When you write to us by email or WhatsApp, or call: your contact details and what you tell us.
  • When you browse: pages visited, approximate location, device and browser, through analytics cookies (see the cookie policy), and technical data such as your IP address in security and server logs.
  • If this website offers a chat assistant and you use it: your messages, any contact detail you choose to leave, and a random identifier in a cookie that is set only once you start using it.
  • When you become a client: billing details, and the access and information we need to work on your website, search presence or advertising accounts.

Why, and on what legal basis.

  • To answer your enquiry and prepare a proposal: steps you ask for before a contract, or our legitimate interest in replying.
  • To deliver our services and bill them: performance of our contract with you.
  • To understand how the website is used and improve it: our legitimate interest, or your consent where the law of your country requires it.
  • To keep the website and its forms secure and free of spam: our legitimate interest.
  • To meet tax, accounting and other legal obligations: legal obligation.

We do not sell personal data, and we do not use it to build advertising profiles.

Chat assistant. Replies in the chat are drafted automatically by language models, from the information published on this website. The chat says so on screen, can make mistakes, and passes the conversation to a person when it cannot answer. It does not make decisions that have legal or similarly significant effects on you.

Who we share it with. Service providers that help us run the website and the business, by category: hosting, security and network; email; website analytics; spam protection for forms; messaging platforms such as WhatsApp; language-model and speech providers for the chat assistant; accounting and professional advisers. They act under contract and only to provide their services to us. We also share data when the law requires it.

International transfers. We are a United States company, and our providers operate in several countries, including the United States. The chat assistant may use providers that process data in China, which has no adequacy decision from the European Commission. Where data leaves the European Economic Area, the United Kingdom or another country that restricts transfers, we rely on the safeguards that law allows, such as adequacy decisions, standard contractual clauses or the contractual terms of the provider.

How long we keep it.

  • Enquiries that do not lead to working together: up to 24 months after the last contact.
  • Client records: while we work together, and afterwards for as long as tax and accounting law requires.
  • Chat conversations: 180 days.
  • Detailed analytics data: no longer than 14 months.

Your rights. Depending on where you live, you can ask to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw any consent you gave. Write to [email protected]. We reply within 30 days and may need to confirm it is you.

Complaints. You can complain to the data protection authority where you live: in Spain, the Agencia Española de Protección de Datos; in Malaysia, the Personal Data Protection Commissioner; in Singapore, the Personal Data Protection Commission. In Mexico, this policy is our privacy notice under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares: you can exercise your ARCO rights (access, rectification, cancellation and opposition) by writing to us, and the authority is the Secretaría Anticorrupción y Buen Gobierno.

When we work on your behalf. When we manage your website, analytics or advertising accounts, we may handle personal data of your own customers. There we act on your instructions, as your processor, under our agreement with you, and this policy does not cover that data.

Security. We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure. If a breach affects your data, we tell you, and the authorities, where the law requires it.

Children. This website is not directed to children under 16, and we do not knowingly collect their data.

Changes. We update this policy when the way we handle personal data changes, and change the date above.

Questions about this?

Just ask me directly.

Write to [email protected] and I will answer it myself.