Legal

Privacy Policy

Last updated: November 14, 2026

In short: this website has no accounts, no forms, no cookies, no analytics and no advertising trackers. We only handle personal data when you buy from us on Etsy or contact us.

1. Who is responsible for your data

Vivid Asset Studio is an independent, sole-trader design studio based in England, United Kingdom. We are the “controller” of the personal data described in this policy. To contact us about privacy, please message us through our Etsy shop.

2. What we collect and why

WhenWhatWhy, and our lawful basis
You visit this websiteOur hosting provider, Netlify, automatically processes your IP address and basic request data (such as browser type, the page requested and the time) in its server logs. We don’t use this to identify you.To deliver the site and keep it secure. Lawful basis: our legitimate interests in running a secure website.
You buy from our Etsy shopEtsy shares order details with us, such as your name, Etsy username, what you bought and when. Etsy handles payment. We never see your card details.To fulfil your order, provide support and keep the tax and accounting records the law requires. Lawful basis: contract and legal obligation.
You message or email usYour name or username, your contact details and whatever you choose to tell us.To answer you. Lawful basis: our legitimate interests in responding to enquiries, or contract where it relates to an order.

We don’t collect special category (sensitive) data, we don’t make automated decisions about you, and we don’t build advertising profiles.

3. Cookies and tracking

This website sets no cookies and uses no analytics, pixels, fingerprinting or advertising technology. Fonts, scripts and images are served from the site itself, so your browser isn’t sent to third-party servers when a page loads. Links to Etsy include a simple tag (for example utm_source=website) that tells us a visit came from this site. It doesn’t identify you. See our Cookie Policy.

4. Who we share data with

We never sell your personal data, and we don’t share it for anyone else’s marketing.

5. International transfers

We are based in the United Kingdom. Netlify and Etsy are based in the United States and may process data there and in other countries. Where UK data protection law applies, such transfers are protected by an appropriate safeguard, such as the UK–US data bridge or standard contractual clauses put in place by those providers.

6. How long we keep data

Order records are kept for as long as tax law requires, normally six years after the end of the tax year. Messages are kept for as long as needed to deal with your enquiry and for a reasonable period afterwards. Netlify keeps server logs for a limited period under its own retention policy.

7. Your rights

Under UK and EU data protection law you have the right to ask for access to your data, to have it corrected or erased, to restrict or object to our use of it, and to data portability. To use any of these rights, contact us. We will reply within one month.

You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk). We’d appreciate the chance to put things right first.

8. US visitors

We don’t sell or share personal information as those terms are defined in US state privacy laws such as the California Consumer Privacy Act, and we don’t use personal information for targeted advertising. Depending on where you live, you may have rights to access, correct or delete your personal information. Contact us to use them. We won’t treat you differently for doing so. Because this site doesn’t track visitors across websites, it doesn’t respond differently to “Do Not Track” or Global Privacy Control signals.

9. Children

Our products are for business owners. This site isn’t directed at children under 16 and we don’t knowingly collect their data.

10. Security

The site is served over an encrypted (HTTPS) connection and stores no personal data itself. No method of transmission over the internet is completely secure, but we take reasonable steps to protect the limited data we hold.

11. Changes

If we change how we handle personal data, for example by adding analytics or a newsletter, we will update this policy and, where the law requires it, ask for your consent first.