What we collect, why, how long we keep it and what you can ask us to do.
| Category | Examples | Where it comes from |
|---|---|---|
| Identity & contact | Name, email, phone, delivery address | You, at checkout or sign‑up |
| Order data | Items, sizes, artwork files, proofs, order history | You, through the studio and checkout |
| Payment | Card brand and last four digits, billing address | Our payment processor — we never see the full number |
| Technical | IP address, browser, device type, pages viewed | Automatically, if you accept analytics cookies |
| Communications | Emails and support messages | You |
Files you upload are stored so you can reorder without sending them again. They are not used for anything else, they are not sold or licensed, and they do not appear in our marketing unless you say yes. Ask us and we will delete a specific file — though that also removes your ability to reorder it.
Only with processors who need it to do their job, under contract, and never for their own marketing:
We do not sell personal data and we do not share it for cross‑context behavioural advertising. We may disclose data where the law requires it.
| Data | Retention |
|---|---|
| Order and invoice records | 7 years — tax law |
| Account details and saved designs | Until you delete the account |
| Artwork files | 3 years after the last order using them |
| Support conversations | 2 years |
| Analytics | 14 months, aggregated |
Depending on where you live you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or send it to another provider. You can also opt out of marketing at any time.
Use Download my data and Delete account on your profile page, or email privacy@romanacustomworks.com. We reply within 30 days and never charge for it. If you are unhappy with our response you can complain to your local data protection authority.
We use a small number of cookies. Essential ones remember your cart, your design and your theme; optional ones measure which products people look at. You choose on your first visit and can change it any time on the cookie page.
Traffic is encrypted in transit. Passwords are hashed — nobody at the studio can read yours. Card numbers never reach our servers; our processor handles them. Access to order data is limited to staff who need it. No system is perfect, so if a breach ever affects you we will tell you and the regulator within 72 hours.
The site is not aimed at under‑16s and we do not knowingly collect their data. If you believe a child has given us personal data, tell us and we will delete it.
Romana Custom Works, 2200 Kettner Blvd, Unit 210, San Diego, CA 92101. privacy@romanacustomworks.com
