1. Controller

The controller is Layerstudio, a Latvia-based seller. Privacy requests: mind00feel@gmail.com.

2. Data we collect

At checkout we collect your name, email, phone number, full delivery address, country, postal code, order items, notes and the order/payment status. We also keep order identifiers, invoice and tracking references, the accepted Terms version, correspondence, and timestamps. Stripe handles payment credentials; Layerstudio receives payment status and transaction references, not complete card numbers.

Vercel and normal server infrastructure may process technical request data such as IP address, browser information, timestamps, security events and error logs.

3. Why and on what basis

• To prepare, take payment for, deliver and support your order: performance of a contract or steps requested before a contract.
• To issue records, keep accounts, handle consumer claims and meet tax, product-safety or other legal duties: legal obligation.
• To prevent abuse, secure the site, diagnose errors and defend legal claims: legitimate interests, balanced against your rights.
• We do not currently use checkout consent for marketing.

4. Recipients and processors

Data is shared only as needed with Stripe for payment, Vercel for hosting and request processing, Resend for transactional email, an access-controlled order database for order storage, and the selected carrier for delivery. For international shipments, address, contact, order and parcel information may be provided to international carriers, their local partners, customs brokers and competent customs or border authorities where required.

5. International transfers

Some providers, carriers or their subprocessors may process data outside the EEA. Destination-country carriers and customs authorities necessarily receive shipping data in that country where it is needed to deliver or clear the parcel.

6. Retention

Order, payment, invoice and accounting data is retained for as long as needed to fulfil the order and meet applicable accounting, tax and legal obligations. Support correspondence and technical logs are kept only as long as reasonably needed for support, security and legal claims. Data is deleted or anonymised when no longer required.

7. Local storage and cookies

The shopping bag is stored in your browser’s localStorage under a strictly functional key so it persists between pages and visits. The private backoffice stores its access key in sessionStorage for the current browser session. Stripe and Vercel may use strictly necessary security and payment technologies when their services are loaded. The storefront currently has no advertising analytics or non-essential marketing cookies, so it does not display a marketing cookie banner. If that changes, optional technologies must remain disabled until a valid choice is collected.

8. Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction, portability, or object to certain processing. You may complain to the Latvian Data State Inspectorate or another competent supervisory authority. Some data cannot be erased immediately where retention is legally required or needed for legal claims.

9. No account and no automated decision

You can order without creating an account. Layerstudio does not use the order data for solely automated decisions that produce legal or similarly significant effects.

10. Changes

Material changes will be reflected on this page with a new update date. They do not change the agreed commercial terms for an existing order.