Privacy Policy
Controller Information
Replace this block before launch:
Business legal name: Creativate Studios Oy
Business address: Kalastajankuja 1 C 13, Espoo, Finland
Contact email: namesign@digitalartsyhut.com
1. What this policy covers
This policy explains how personal data is processed when you use this site, generate previews, and click through to an external Etsy purchase page.
2. Personal data we process
- Preview input: the name or text you submit to generate the preview.
- Technical and security data: IP-related request data, abuse-prevention counters, and provider logs needed to operate and protect the service.
This site does not currently process payments directly. When you choose to order through Etsy, Etsy processes the purchase under Etsy’s own privacy and checkout policies.
3. Why we process your data
- To generate previews for the name or text you enter.
- To operate and secure the site.
- To prevent abuse, enforce rate limits, and troubleshoot failures.
- To direct interested users to the relevant Etsy ordering page.
4. Legal bases under GDPR
- Performance of a contract: processing needed to deliver previews, orders, downloads, and support requested by you.
- Legal obligation: processing needed for accounting, tax, fraud prevention, or responding to lawful requests.
- Legitimate interests: securing the site, preventing abuse, diagnosing errors, and maintaining delivery/recovery records.
5. Processors and service providers
This service currently uses the following main providers:
- Cloudflare: hosting, security, request handling, and operational infrastructure for previews.
- Etsy: external marketplace and purchase destination if you choose to place an order there.
When you leave this website for Etsy, Etsy operates as a separate service under Etsy’s own terms and privacy documentation.
6. Cookies and similar technologies
This site does not currently use analytics, advertising, remarketing, or personalization cookies set by this application code. We also do not currently use browser local storage or session storage for tracking.
Infrastructure and payment providers may still set strictly necessary cookies or similar technical identifiers. In particular:
- Cloudflare may set security and rate-limiting cookies that are used to protect the site and manage traffic.
- Etsy may use its own cookies or similar technologies when you visit Etsy to complete a purchase.
Because the site currently relies only on strictly necessary operational cookies, it does not currently present a cookie consent banner. If non-essential cookies or tracking tools are added later, the policy and consent mechanism should be updated before those tools are enabled.
7. Data retention
- Preview input is processed to generate the preview and is not intended to be kept as a long-term customer order record on this site.
- Technical logs and security counters may be retained for shorter operational periods depending on provider settings.
We will retain personal data only for as long as reasonably necessary for these purposes, including legal, accounting, and security requirements.
8. International transfers
Some providers used by the service may process data outside your country or outside the EEA/UK. Where applicable, transfers are handled using contractual, legal, or certification-based safeguards offered by those providers.
9. Your rights
Depending on your location and applicable law, you may have rights to:
- access your personal data,
- request correction of inaccurate data,
- request deletion of data where there is no overriding legal basis to keep it,
- object to certain processing based on legitimate interests,
- request restriction of processing, and
- lodge a complaint with your local data protection authority.
To exercise these rights, contact: namesign@digitalartsyhut.com
10. Security
Reasonable technical and organisational measures are used to protect the service and the personal data it processes. No internet-based service can guarantee absolute security, but access is limited to what is operationally necessary and the service uses managed providers for hosting and security.
11. Changes to this policy
This policy may be updated from time to time. The version published on this page applies from the date shown above.