Privacy Policy

1. Data controller

The data controller is Masta Print & IT Services Marcin Staszkiewicz, ul. gen. Józefa Hallera 8, 40-321 Katowice, Poland, Tax ID / NIP: 6443187064, REGON: 243408827.

Privacy contact: office@studiomomentai.com

2. What data we process

We may process:

• full name of the person placing the order
• e-mail address
• phone number, if provided
• invoice details
• order and brief details
• child’s name, age, message or invitation wording
• pronunciation recording
• photos, files and materials submitted by the Customer
• payment information and payment status
• correspondence with the Customer
• technical data, such as IP address, cookie identifiers and analytics data if the user consents to analytics

3. Purposes and legal bases

We process data to:

• handle an enquiry or order
• prepare and deliver a Digital Product
• contact the Customer
• handle payments
• issue accounting documents
• handle complaints
• protect legal claims
• secure the Website
• analyse website traffic if the user has consented to analytics

The legal bases may include:

• performance of a contract or pre-contractual steps
• legal obligations of the Seller
• legitimate interests, such as complaint handling, claim protection and security
• consent, for example for analytics cookies or publishing a child’s materials

4. Children’s data

StudioMomentAI may process a child’s name, age, photo, pronunciation recording or other child-related data only to the extent needed to complete the order.

The person submitting child-related data should be the parent, legal guardian or have the appropriate consent.

We do not publish children’s photos or videos without explicit permission.

5. Data recipients

Data may be shared with service providers helping us operate the Website, in particular:

• hosting and infrastructure providers
• payment provider, for example Stripe
• e-mail and communication providers
• analytics providers, for example Google Analytics, only within the scope covered by consent
• CDN/storage providers, if used to securely deliver files
• accounting providers
• subcontractors helping us complete orders, if necessary and subject to appropriate confidentiality obligations

6. Transfers outside the EEA/UK

Some technology providers may process data outside the European Economic Area or outside the UK. In such cases, appropriate safeguards should be used, such as standard contractual clauses, adequacy decisions or other mechanisms required by law.

7. Retention

Order data and accounting documents are stored for the period required by law.

Materials submitted for an order are stored for the time needed to complete the order, handle complaints and protect claims. If a specific workflow does not require longer storage, materials should be deleted or archived in a limited scope after completion and the complaint handling period.

Data processed on the basis of consent is stored until consent is withdrawn or until the data is no longer needed.

8. User rights

The data subject has the right to:

• access their data
• correct their data
• delete their data
• restrict processing
• data portability
• object to processing
• withdraw consent at any time if processing is based on consent
• lodge a complaint with the Polish Data Protection Authority. UK users may also contact the UK ICO for guidance

9. Security

We use organisational and technical measures to protect data, especially children’s materials, photos, pronunciation recordings and order files.

Customer materials are not published on public product pages without consent.

10. Cookies

Cookie usage rules are described in the Cookie Policy.