Privacy policy (Last updated: 23.03.2026)

1. Data Controller:

DN studio (Sole Trader)
12 High Street
SA13 3YN
Abergwynfi, Neath Port Talbot
United Kingdom

2. Data We Collect

We may collect:
• Name, surname, email
• Adresses (billing/shipping)
• Phone number (required for non-UK deliveries)
• Orders and purchase history
• Marketing consents
• Server logs (Cloudflare)
• Cookies (Breeze)

Providing personal data is necessary to process orders. Without it, we may not be able to fulfil your order.

3. Purpose and Legal Basis

We process your data for:
• Order processing and delivery
  (legal basis: contract)
• Legal obligations (taxes, customs)
  (legal basis: legal obligation)
• Marketing communication (if consent given)
  (legal basis: consent)
• Website analytics and security
  (legal basis: legitimate interest)

4. Data Sharing (Subcontractors)

We share data only where necessary with:
• Stripe – payments processing, we do not store credit cards
• Fasthosts VPS – hosting in the UK
• Cloudflare – security and prformance
• Google – analytics (Google Analytics)

We do not store card details.

5. International Transfers

Some of our providers (e.g. Stripe, Cloudflare) may process data outside the UK.

Where this happens, appropriate safeguards are used in accordance with UK data protection law.

6. Data Retention

We retain personal data:
• for as long as necessary to fulfil orders
• for up to 6 years for accounting and legal purposes
• Withdrawal of marketing consents
• Data export

7. Your Rights

You have the right to:
• access your data
• correct or delete your data
• withdraw consent (for marketing)
• request data export

8. Cookies

We use cookies for:
• essential website functionality (e.g. shopping cart)
• security (Cloudflare)

9. Automated Decision-Making

We do not use automated decision-making or profiling.

10. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page.