Legal

Privacy Policy

This site collects six things, each only when you type it in yourself.

1. Controller

The controller for the purposes of the GDPR is the business named in the Legal Notice. Contact: darius@migulastudio.com.

2. What we collect

Newsletter (“First Access”) — your email address only.

Swatch request — your email address, and which motif you asked to see. Nothing else.

Commercial commission inquiry — your company, name, email, phone if you give one, what the project is, and the scope you select. Sent from the commissions page for hotels and spaces.

Reservation — your email address, which piece and format you chose, whether you asked for lettering and what it says, and the total quoted. No payment details: nothing is charged at that step.

Wholesale inquiry — your name, email address, company (optional), and the message you write.

Bespoke request — your name, email address, what you are after, an optional size, any initials or lettering you want cut, and your notes. The lettering is stored only so the piece can be made.

Nothing else is collected on this site. There is no tracking pixel, no advertising network, no third-party script, and no cookie set by us.

3. Why, and on what legal basis

Newsletter — to tell you when a new motif or batch is released. Legal basis: your consent, Art. 6(1)(a) GDPR, given by ticking the consent box before you submit.

Swatch request — to send you the macro photograph you asked for, and afterwards to tell you about new motifs. Legal basis: your consent, Art. 6(1)(a) GDPR, given by ticking the consent box. The motif you selected is kept only so the right photograph is sent.

Reservation — to hold the piece, confirm it can be made as configured, and send you a payment link. Legal basis: steps taken at your request prior to entering a contract, Art. 6(1)(b) GDPR.

Inquiry, bespoke and commercial-commission forms — to answer your wholesale or commission request and to quote the work. Legal basis: steps taken at your request prior to entering a contract, Art. 6(1)(b) GDPR, together with your consent to be contacted.

4. How long it is kept

Newsletter and swatch-request addresses are kept until you unsubscribe, and deleted within 30 days of that. If you asked for a swatch and never subscribed, the address is deleted within 30 days of the photograph being sent.

Inquiries and bespoke requests are kept for up to 24 months after the last message in the exchange, then deleted — unless the inquiry became an order, in which case commercial retention periods under Polish tax law apply.

5. Who processes it

Form submissions are received and stored by Netlify (Netlify Inc., USA), our hosting provider, acting as a processor under a data processing agreement and the EU Standard Contractual Clauses. Netlify’s server logs record the IP address of visitors for security and abuse prevention; these logs are not used to profile anyone.

Traffic is measured with Netlify Analytics, which reads the server logs after the fact. It sets no cookie, runs no script in your browser, and does not follow you across sites.

Purchases happen on Etsy, not here. Once you follow a buy link, Etsy’s own privacy policy governs what it collects.

6. Your rights

You may request access to your data, correction, deletion, restriction of processing, or a portable copy; and you may object to processing or withdraw consent at any time, with effect for the future. One email to darius@migulastudio.com is enough — no form, no account.

You also have the right to lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO).

7. Changes

If what we collect changes, this page changes with it before the change takes effect. Last updated: .

Legal Notice · Home