1. Data Controller:
DN studio (Sole Trader)
12 High Street
SA13 3YN
Abergwynfi, Neath Port Talbot
United Kingdom
2. Data We Collect
We may collect:
- Name, surname, email
- Adresses (billing/shipping)
- Phone number (required for non-UK deliveries)
- Orders and purchase history
- Marketing consents
- Server logs (Cloudflare)
- Cookies (Google Analytics, Breeze)
Providing personal data is necessary to process orders. Without it, we may not be able to fulfil your order.
3. Purpose and Legal Basis
We process your data for:
- Order processing and delivery
(legal basis: contract)
- Legal obligations (taxes, customs)
(legal basis: legal obligation)
- Marketing communication (if consent given)
(legal basis: consent)
- Website analytics and security
(legal basis: legitimate interest)
4. Data Sharing (Subcontractors)
We share data only where necessary with:
- Stripe – payments processing, we do not store credit cards
- Fasthosts VPS – hosting in the UK
- Cloudflare – security and prformance
- Google – analytics (Google Analytics)
We do not store card details.
5. International Transfers
Some of our providers (e.g. Stripe, Google, Cloudflare) may process data outside the UK.
Where this happens, appropriate safeguards are used in accordance with UK data protection
law.
6. Data Retention
We retain personal data:
- for as long as necessary to fulfil orders
- for up to 6 years for accounting and legal purposes
- Withdrawal of marketing consents
- Data export
7. Your Rights
You have the right to:
- access your data
- correct or delete your data
- withdraw consent (for marketing)
- request data export
8. Cookies
We use cookies for:
- essential website functionality (e.g. shopping cart)
- analytics (Google Analytics)
- security (Cloudflare)
9. Automated Decision-Making
We do not use automated decision-making or profiling.
10. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on
this page.