Privacy Policy

Privacy Policy

Last updated: October 29, 2025

This privacy notice for Tulastra Studio ("we", "us", or "our") explains how and why we might collect, store, use, and share ("process") your information when you use our services ("Services"), such as when you:

  • Visit our website at https://tulastra.com, or any website of ours that links to this Privacy Policy.

  • Engage with us in other related ways, including sales, marketing, or events.

If you have any questions or concerns about this notice, please contact us at hello@tulastra.com.

Summary of Key Points

What personal information do we collect?
When you visit or use our Services, we may process personal information depending on how you interact with us and the features you use.

Do we process sensitive personal information?
No.

Do we receive information from third parties?
Yes. We may receive aggregated or inferred information from analytics, advertising, and social platforms (for example, Pinterest and Meta) to help us measure performance and show relevant content.

How do we process your information?
We process your information to provide, improve, and manage our Services, communicate with you, for security and fraud prevention, and to comply with laws.

How do we keep your information safe?
We use reasonable technical and organisational safeguards to protect your data, but no online system is 100% secure.

What are your rights?
You have rights under UK and EU law to access, correct, delete, or restrict the use of your data, and to withdraw consent for marketing or cookies at any time.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you provide to us

We collect personal information that you voluntarily provide when you register, make a purchase, sign up for emails, or contact us. This may include:

  • Name

  • Email address

  • Billing or shipping address

  • Payment details (via third-party processors)

  • Communication preferences

Payment data

We process payments through PayPal, Stripe, Apple Pay, and Clearpay. Their privacy policies apply:

Automatically collected information

When you visit our site, we automatically collect certain technical data (like your IP address, browser type, and pages visited). We use this for security, analytics, and to improve the site.

We also use cookies and similar technologies. See “Cookies and Tracking” below.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your data to:

  • Provide, personalise, and improve our Services.

  • Fulfil and manage your orders.

  • Communicate with you (e.g. order confirmations or support).

  • Send you marketing communications if you’ve opted in.

  • Deliver relevant ads via Pinterest, Meta, or Google (only with your consent).

  • Prevent fraud and maintain security.

  • Comply with legal obligations.

3. LEGAL BASES FOR PROCESSING (UK & EU)

We only process your data when there’s a valid reason to do so:

  • Consent: for marketing emails, cookies, and advertising pixels (Pinterest/Meta).

  • Contract: to fulfil your purchases and provide customer support.

  • Legal obligation: to comply with tax, accounting, or legal requirements.

  • Legitimate interests: to improve our services and prevent fraud.

You can withdraw your consent at any time via our cookie banner or by emailing hello@tulastra.com.

4. WHEN AND WITH WHOM DO WE SHARE YOUR DATA?

We may share data with trusted third parties who help us run our business. These include:

  • Website hosting: Squarespace

  • Payment processing: Stripe, PayPal, Apple Pay, Clearpay

  • Analytics: Google Analytics

  • Advertising & measurement: Pinterest (Pinterest Tag), Meta (Facebook Pixel / Instagram Ads)

  • Marketing tools: Pinterest Catalogs, Google Merchant Center

All service providers act under contract, and they’re not permitted to use your data for their own purposes.

5. COOKIES AND TRACKING

We use cookies and similar technologies to make our site work and to understand how it’s used.

Some cookies are essential for site functionality. Others (like Pinterest Tag and Meta Pixel) help us show relevant ads and measure performance. These advertising cookies run only after you give consent via our cookie banner.

Pinterest’s Automatic Enhanced Match may send hashed (pseudonymised) contact data to improve campaign accuracy. You can change or withdraw your consent at any time using the banner on our site or your browser settings.

6. INTERNATIONAL DATA TRANSFERS

Your data may be processed in the United Kingdom, the European Economic Area, or the United States (where Squarespace and other providers operate). We use Standard Contractual Clauses (SCCs) to ensure your data is protected wherever it’s processed.

7. HOW LONG WE KEEP YOUR DATA

We keep your data only as long as needed for the purposes described in this notice or as required by law (e.g. tax obligations). When no longer required, it’s securely deleted or anonymised.

8. HOW WE KEEP YOUR DATA SAFE

We use appropriate technical and organisational security measures. However, no system is completely secure — transmission of data is at your own risk.

9. CHILDREN’S PRIVACY

We do not knowingly collect or market to anyone under 18.

10. YOUR RIGHTS

Under the UK GDPR and EU GDPR, you have the right to:

  • Access the data we hold about you.

  • Request correction or deletion.

  • Restrict or object to processing.

  • Withdraw consent for marketing or cookies.

  • Complain to the ICO (Information Commissioner’s Office) at ico.org.uk.

Contact us at hello@tulastra.com to exercise these rights.

11. PRIVACY SIGNALS

We respect browser privacy signals (such as Global Privacy Control (GPC)). If you opt out of marketing cookies, Pinterest and Meta tracking will not run.

12. UPDATES TO THIS POLICY

We may update this notice from time to time. Changes will be posted here with a new “Last updated” date.

13. CONTACT US

Tulastra Studio
4 Neves Close, Norwich, NR13 4AW, UK
Email: hello@tulastra.com
Website: https://tulastra.com