Privacy policy

Data we use and why

For orders, accounts, and custom requests, we use only the data needed for fulfilment and communication. For the studio list, we use the email address, language, consent text and time, confirmation status, and unsubscribe status.

Legal basis and choice

We process order data to perform the contract and meet applicable obligations. We send studio marketing only after free, specific, and confirmed consent. Consent can be withdrawn at any time using the unsubscribe link in every message or by contacting us; withdrawal does not affect earlier lawful processing.

Service providers and transfers

Data is stored with Supabase and email is delivered by Resend. Payments are processed by Stripe Checkout and PayPal; card details are not stored on this site. If a provider processes data outside the European Economic Area, the controller must use an applicable GDPR transfer mechanism; details can be requested through the privacy email.

How long data is kept

A confirmation link expires after 48 hours, and expired pending requests are removed during the next signup or owner list refresh. A confirmed signup is kept until withdrawal; after withdrawal, only the minimal proof and suppression record is kept for as long as needed to respect the choice and defend legal claims. Order data is kept for applicable accounting and legal periods.

Your rights

You may request access, correction, erasure, restriction, objection, or portability where applicable. You may also complain to the Latvian Data State Inspectorate (dvi.gov.lv).

Privacy questions