Privacy Policy
Compliant with the General Data Protection Regulation (EU GDPR 2016/679)
1. Data Controller
The Data Controller responsible for your personal data collected through Our3DStory is:
Our3DStory Studio
Address: Nicosia, Cyprus
Email: our3Dstory@gmail.com
2. Personal Data We Collect
We collect only the minimum data necessary to fulfil your orders and provide customer support:
- Order Fulfillment: Full name, delivery address in Cyprus, contact telephone number (for courier dispatch SMS), and email address.
- Payments: Payment transactions are handled directly by Stripe Inc. under PCI-DSS Level 1 compliance. We do not store full debit or credit card numbers on our servers.
- Transactional Communications: Email delivery status and order confirmations via Resend.
3. Legal Basis for Processing
We process your personal data under Article 6(1)(b) of the GDPR (performance of a contract for order fulfillment), Article 6(1)(c) (legal compliance with Cyprus tax and accounting laws), and Article 6(1)(f) (legitimate interest in protecting our store against fraudulent transactions).
4. Your GDPR Rights
Under European data protection laws, you retain the right to access, rectify, or request erasure of your personal data, as well as the right to data portability. To exercise any of these rights, contact us at our3Dstory@gmail.com.