Privacy

Data controller

The data controller is Collective 1x3 LLC DBA Teye.studio, 8206 Louisiana Blvd NE, Ste A #5229, Albuquerque, NM 87113, États-Unis, publisher of teye.studio. For questions about your data: contact@teye.studio.

Data collected

• Photos and text that you upload in the Studio to personalize a design.
• Order data : name, delivery address, email address, order contents and amount.
• Data related to opted-in reminders : consent date and version, accepted or delivered emails, delivery errors, clicks and resumed payments. We do not retain the IP address or browser sent with a click.
• Technical data : IP address, browser type and pages visited, for security and aggregated audience measurement.
• My account : verified email, profile, saved addresses, active sessions and saved designs. Sign-in codes are never stored in plain text.
• QR code transfer : temporary tokens, upload progress and processed photos. The QR code contains no email, order or cart.

The country of a visit is derived from the IP address, in memory, without the address being stored. This relies on the IP to Country Lite database by DB-IP, published under the CC BY 4.0 licence: IP Geolocation by DB-IP.

We do not collect your bank details or payment credentials: you enter them directly with our payment provider and they never pass through our servers.

Purposes and legal bases

• Produce and deliver your order, including manual design review, to perform our contract.
• Email you updates about your order, to perform our contract.
• Respond to your requests and provide after-sales support, based on our legitimate interest.
• Remind you by email about an order you did not complete, based on your consent, given by ticking the box offered when you enter your email. Your cart and the details already entered are then saved so you can resume, and kept for three weeks after your last visit. Three messages at most, at least 48 hours apart, sent only if you have not come back to the site in the meantime, with an unsubscribe link in each. You can withdraw this consent at any time without affecting the tracking emails for your paid orders.
• Measure email deliverability and know whether a visit or an order came from an email, using a campaign marker added to links to the site. No open pixel or click tracking is used, and this measurement never triggers any decision about you.
• Meet our accounting and tax requirements, based on a legal obligation.
• Provide your account, sync designs between your devices and secure sign-ins, based on providing the requested service and our legitimate interest in protecting accounts.

Who can access your data

Your data is shared only with providers needed to fulfil your order: hosting, file storage, payment, printing and transactional or opted-in marketing email services. Each acts as a processor under a contract governing data use.

No analytics or browsing data is sent to a third-party provider. Audience measurement uses our own internal tools to limit sharing of your data.

Your photos are never sold, shared with advertisers or used in our communications without your explicit written permission.

Retention periods

• Drafts and saved designs: 90 days after the last save. Photos required for them remain available at least until then, even if the payment link has expired. You can delete the local browser copy at any time by clearing site data.
• Photos uploaded without an order: 6 months after upload. Photos used in an order and related production files: 6 months after delivery or final closure of an order canceled before delivery. A valid saved design or another ongoing order may extend retention of shared photos. Deletion covers the original and its display and print copies.
• Order data and invoices: 10 years, in accordance with accounting obligations.
• Customer service correspondence: 3 years after the last contact.
• Consent, delivery logs and events relating to opted-in reminders for unfinished orders: 3 years. A minimal suppression list may be kept longer when needed to ensure unsubscribed addresses are not contacted again.
• Expired sign-in codes: deleted within 24 hours. Revoked or expired sessions: deleted after their security retention period. QR transfers expire after ten minutes and their logs are deleted after 30 days.

Transfers outside the European Union

Your files are hosted and stored in the European Union. Some providers may process data from other countries.

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability. You can request immediate deletion of your photos at any time by emailing contact@teye.studio, including after delivery. We respond within 30 days.

If you believe your rights have not been respected, email contact@teye.studio first. We respond promptly and resolve most requests directly. You may also complain to the CNIL, 3 place de Fontenoy, 75007 Paris.

Cookies

Functional cookies remember your country and language preferences for up to one year. You can change them at any time using the site selector.

The site uses cookies necessary for its operation: your cart, account sign-in, temporary tracking access, security, stable payment-provider assignment and anonymised audience measurement. The assignment cookie contains only a random ID, with no country, amount or identity, and expires within 395 days. No advertising cookies are set and no data is shared with advertising networks.