Privacy Policy

Privacy Policy — Concept

[Draft for legal review — red italic text = to be filled in, confirmed or checked.]

Last updated: October 21, 2026

1. Who we are

This Privacy Policy explains how Studio Salty Sun collects, uses and shares your personal data when you visit studiosaltysun.com, buy from us or contact us.

Studio Salty Sun is a trade name of Styling by Valeria, Briljantlaan 203, 3523 CD Utrecht, the Netherlands (KVK 67817130). We are the controller of your personal data. Questions or requests: info@studiosaltysun.com.

2. What data we collect

  • Contact details: name, billing and shipping address, phone number, email address
  • Order details: what you buy, return, exchange or cancel
  • Payment details: payment method and transaction details. Card details are handled by our payment provider; we never see or store your full card number
  • Account details: email address, password and preferences, if you create an account
  • Messages: what you write to us, for example by email
  • Device and usage data: browser, device, IP address and how you use our website, partly through cookies (see our Cookie Policy)

We get this data directly from you, automatically when you use our website, and from service providers who work for us.

3. Why we use it, and on what legal basis

  • To process and deliver your order, handle payments, returns and customer service — to perform our agreement with you
  • To keep our records for tax and accounting — legal obligation
  • To keep our website and payments secure and prevent fraud — legitimate interest
  • To understand how our website is used and improve it — your consent (analytics cookies)
  • To send you our newsletter and show you relevant ads — your consent, which you can withdraw at any time

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects for you.

4. How long we keep your data

  • Order and invoice data: 7 years, as required by Dutch tax law
  • Account data: until you close your account, or after [period] of inactivity
  • Customer service messages: [period]
  • Newsletter data: until you unsubscribe

5. Who we share it with

We only share your data where this is needed:

  • Shopify — our webshop platform, which also hosts the data, handles our order emails and, with your consent, our newsletter
  • Payment providers — to process your payment [name, e.g. Shopify Payments / PayPal]
  • Fulfilment partner and carrier — to pack and deliver your order [name fulfilment partner, carrier]
  • Zoho — our business email provider, which processes the emails you send us and our replies
  • Instafeed — the app that shows our Instagram posts on our website; when the feed loads, your IP address is shared with the app provider and possibly with Instagram (Meta). See our Cookie Policy
  • Analytics and advertising partners — only with your consent; see our Cookie Policy

We also share data when the law requires us to. We do not sell your personal data, and we do not share it with the brands we sell.

For some of its own features, Shopify uses data about your use of our store together with data from other stores. In that case Shopify is responsible for that processing. More information: Shopify Consumer Privacy Policy.

6. Data outside the EU

Our founder runs Studio Salty Sun from Singapore and accesses order and customer data from there. Your data remains stored on Shopify's systems, and the GDPR continues to apply to everything we do with it.

Shopify and some of our other service providers also process data outside the European Economic Area, for example in Canada and the United States. Where that happens, the transfer is covered by an adequacy decision of the European Commission or by the European Commission's Standard Contractual Clauses.

[Lawyer to confirm the transfers and safeguards that apply, including access from Singapore, Zoho's data centre location and Instafeed.]

7. Your rights

Under the GDPR you have the right to access, correct or delete your data, to restrict or object to its use, to receive your data in a portable format, and to withdraw your consent at any time. Withdrawing consent does not affect what we did before.

To use these rights, email info@studiosaltysun.com. We may ask you to confirm your identity, and we respond within one month. You can unsubscribe from our newsletter at any time via the link in every email.

Not happy with how we handle your data? Please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

8. Security

We take appropriate technical and organisational measures to protect your data. Our website uses a secure connection (SSL), and payments are processed by certified payment providers. No system is perfectly secure, so please do not send sensitive information by unsecured email.

9. Children

Our website is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes

We may update this Privacy Policy. The current version is always on this page, with the date it was last updated at the top.