Privacy Policy

Introduction

ImprintLuxury ("we", "us", "our") operates the https://imprintluxurystudio.com website. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Data Collection

We collect the following types of personal data:

• IP Address & Device Info: Automatically collected via web server logs and analytics platforms
• Page Views & Browsing Behavior: Tracked via Google Analytics 4 (GA4), Google Tag Manager (GTM), and PostHog
• Events: Product views, add-to-cart, checkout initiation, and purchase completions via GA4, GTM, Meta Pixel, and PostHog
• Session Replay: A playback of clicks, scrolling, and page navigation via PostHog, with every form field masked. What you type into a name, address, or note field is not recorded, and card details are entered inside Stripe's own frame, which we cannot record at all
• Heatmaps: Once we turn this on, PostHog shows us where visitors click, move the cursor, and scroll on a page, as an anonymized overlay rather than a recording. It runs only for visitors who accept analytics cookies, and never on your order page
• Order Survey: Once we turn this on, PostHog may show you one short question on your order page, asking what almost stopped you from ordering, if anything. The question offers preset answers with no text box, runs only for visitors who accept analytics cookies, and never carries your order number or other identifying detail
• Form Submissions: Name, email address, and custom product preferences when you contact us or configure a product
• Payment Information: Processed by Stripe (we do not store credit card data)
• Order Data: Shipping address, order history, and fulfillment status stored in our Turso/LibSQL database

Data Retention

We retain personal data according to the following schedules:

• Google Analytics (GA4): 14 months default (configurable up to 50 months)
• PostHog (product analytics, session recordings, heatmaps & survey answers): Deleted automatically on the retention schedule set for our PostHog project. Withdrawing analytics consent under Cookie settings stops new recordings, heatmap data, and the survey straight away
• Stripe Payment Data: Per PCI DSS compliance, typically 7 years for tax/legal purposes
• Order Data (Turso): 3 years while active; after 3 years, personally identifiable information is anonymized or deleted upon request
• Session Cookies: 7 days from the last time you add to your cart or sign in, or until you sign out (HttpOnly, Secure, SameSite=Lax)
• Consent Preference (il_consent): Stored in localStorage for 1 year

Marketing Email

If you give us your email address through the sizing-guide form or the sign finder, we use it to send you the guide you asked for, followed by a short series of messages about how we work and what we make. If you tick the newsletter box on the contact form, we first email you a link to confirm, and we send newsletter emails only after you click it. We collect these addresses for no other reason. Our legal basis is your consent, given by submitting the form, and you can withdraw it at any time without affecting anything you have already ordered.

Every marketing email carries a one-click unsubscribe link. Unsubscribing takes effect immediately and permanently, and you can also reach us at hello@imprintluxurystudio.com to be removed by hand. We keep a record of unsubscribed addresses so that we do not email them again by mistake.

Unsubscribing from marketing does not stop transactional email. You will still receive order confirmations, proof approvals, and shipping updates for any purchase, because those are part of the order itself rather than marketing.

We store subscriber addresses with Resend, our email provider, for as long as you remain subscribed and for up to 12 months afterward so the suppression list stays accurate. We do not sell, rent, or share your address with anyone else.

Your Privacy Rights

GDPR (if you are in the EU): You have the right to access, correct, or delete your personal data. You also have the right to restrict processing and to data portability. To exercise these rights, contact us at hello@imprintluxurystudio.com with "GDPR Request" in the subject line.

CCPA/CPRA (if you are a California resident): You have the right to know, delete, and opt out of the sale or sharing of your personal data. We do not sell your personal data. We honor Global Privacy Control (GPC) signals: if your browser sends one, we treat it as a request to opt out of sharing and turn off marketing tracking by default before you interact with our cookie banner. To exercise your rights, contact us at hello@imprintluxurystudio.com with "CCPA Request" in the subject line.

Third-Party Services

We use the following third-party services to operate our storefront. These services may process your personal data:

• Google Analytics & Google Tag Manager (analytics category): Page view and event tracking (US-based). See Google's Privacy Policy
• PostHog (analytics category): Product usage analytics and session replay: a playback of how pages were used, with every form field masked so what you type is never recorded. Once we turn them on, PostHog also runs anonymized click-and-scroll heatmaps and may show a short, multiple-choice order survey. Both stay behind the same analytics consent gate (US cloud). See PostHog's Privacy Policy
• Meta Pixel (Facebook) (marketing category): Conversion tracking and advertising attribution (US-based). See Meta's Privacy Policy
• Cloudflare Web Analytics: Cookieless page-view beacon (US-based)
• Stripe: Payment processing (US-based, PCI DSS Level 1 compliant)
• Turso / LibSQL: Database hosting for product catalog and orders (US-based)
• Resend: Email delivery for order confirmations and updates (US-based)

Cookies & Local Storage

We use cookies and local storage to enhance your experience:

• il_consent: Stores your cookie consent preference in localStorage (1-year duration)
• Session Cookie: Keeps your shopping cart and, if you sign in, your account session. It lasts 7 days from the last time you add to your cart or sign in, and is deleted when you sign out (HttpOnly, Secure, SameSite=Lax)
• GA4 Cookies: Google Analytics cookies for tracking and analysis (managed by Google)
• il_first_touch_utm: Records how you first found us, so we know which of our campaigns is worth running again. Your browser keeps it in localStorage for 90 days, and after that we ignore it and delete it. It holds the campaign labels from the link you arrived on (utm_source, utm_medium, utm_campaign, utm_content, utm_term) plus the site you came from, which we store as the site address only, never the full page URL. It holds no name and no email, and nothing else in it identifies you. If you place an order, we pass those labels to Stripe as metadata on that order so we can tell which campaign brought it.

Children's Data

We make nursery and baby signs, but our storefront is meant for adults doing the shopping. We do not knowingly collect personal data from anyone under 13, and we have no features aimed at children. If you are a parent or guardian and you believe a child has given us their information, email us at hello@imprintluxurystudio.com and we will delete it.

Security of Your Personal Data

The security of your personal data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

If you have any questions about this Privacy Policy, please contact us at hello@imprintluxurystudio.com