LEGAL

Privacy

We collect what commerce requires: contact details, addresses, order history, and the preferences you explicitly set. We do not sell personal data, run third-party ad trackers, or profile beyond what you can see in your own account.

Marketing email requires your explicit consent and every message carries an unsubscribe. Analytics events are recorded against anonymous session keys, not identities.

You may request export or deletion of your data at any time by writing to the studio; both are honored within 30 days. Payment card data is handled solely by our payment provider and never reaches our servers.

DRAFT — requires legal review (GDPR) before launch.