Privacy
We keep very little, and only what we need to make and send your bag, and to write to you when you have asked us to. Here is what we collect, why, and how to ask us to remove it.
Draft — to be confirmed by the studio’s legal advisor.
What we collect
- OrdersYour name, email address and shipping address, the shades and quantities you ordered, and any handwritten note you ask us to include.
- NewsletterYour email address, once you have confirmed it by clicking the link in the email we send you (double opt-in).
- WaitlistYour email address and the shade you are waiting for.
- MessagesYour name, email address and whatever you write to us, so that we can reply.
Who helps us
A few trusted services handle parts of this on our behalf. Each sees only what it needs.
- StripeTakes payment. Your card details go straight to Stripe and never touch our servers.
- ResendSends our emails — order confirmations, newsletters and waitlist notes.
- NetlifyHosts this site.
- Neon / SupabaseStores orders and sign-ups in our database. [Provider — to confirm]
How long we keep it
- OrdersFor accounting, for the legally required period: [X years — to confirm].
- NewsletterUntil you unsubscribe. There is a link to do so in every letter.
- WaitlistUntil we have written to you, or for 12 months, whichever comes first.
Cookies
Only the strictly necessary ones, which keep your bag and checkout working. No third-party trackers and no advertising cookies — nothing follows you around.
Your rights
Under the GDPR you may, at any time, ask us for:
- AccessA copy of the details we hold about you.
- RectificationA correction, if something is wrong or out of date.
- ErasureDeletion of your details, where we are not required to keep them.
- PortabilityYour details in a format you can take elsewhere.
- ObjectionFor us to stop using your details for a given purpose.
To make a request, or to have your details deleted, write to hello@sorelia.studio. We will answer within a month. You may also complain to your local data protection authority.
Who is responsible
The data controller is [Sorelia Studio — legal entity and address to confirm]. Questions about this page can be sent to hello@sorelia.studio.
