Privacy Policy

1. Responsible party

Migula Studio — Darius Miguła — is responsible for the processing of your personal data on this website. Contact details can be found in the Impressum.

This privacy policy explains how we collect, use, and protect your information when you visit migulastudio.com, place an order, or communicate with us.

2. Data we collect

Depending on your interaction with our site, we may collect:

• Order information: name, email address, shipping address, phone number, garment selections, size, payment details (processed by Stripe — we do not store full card numbers).
• Communication data: messages sent to darius@migulastudio.com, including commission enquiries, Guild applications, and returns.
• Technical data: IP address, browser type, referring pages — collected via server logs for security and analytics.
• Newsletter data: email address if you subscribe to our journal updates.

3. How we use your data

We use your information solely for the following purposes:

• Processing and fulfilling your orders (shipping, payment, returns).
• Communicating with you about your order or commission.
• Responding to Guild applications and commissioning enquiries — each response is written by Darius personally.
• Sending journal updates only if you explicitly subscribed; you can unsubscribe at any time.
• Improving our website and preventing fraudulent activity.

4. Legal basis (GDPR)

If you are located in the European Economic Area, our processing of your personal data is based on:

• Contract performance: To deliver the artefacts you ordered.
• Legitimate interests: To communicate directly with you (email, WhatsApp) for commission follow‑ups, to protect our website from abuse, and to improve our service.
• Consent: For optional newsletter subscriptions — you can withdraw consent at any time.

5. Data sharing

We never sell or rent your personal data. We only share it with essential service providers:

• Stripe — payment processing (Stripe's privacy policy applies).
• DHL / local postal services — shipping and delivery.
• Email hosting — to send order confirmations and direct replies from Darius.

All processors are bound by data protection agreements and are located within the EU or in countries with adequate protection levels.

6. Cookies and tracking

Migula Studio does not use analytics cookies, marketing trackers, or any third‑party tracking scripts. We only use essential cookies required for the functioning of the shopping cart and secure checkout. No personal data is collected through cookies beyond what is strictly necessary for the transaction.

7. Data retention

We keep order data for as long as necessary to fulfil our legal obligations (e.g., tax records require 10 years under Polish law). Commission correspondence and Guild applications are kept for the duration of our relationship plus a reasonable period afterwards for reference — you may request deletion at any time.

8. Your rights

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your data (subject to legal retention periods).
• Restrict or object to processing.
• Data portability.
• Withdraw consent (for newsletters).

To exercise any of these rights, email darius@migulastudio.com. Darius reads every request personally and will respond within 30 days.

9. Security

We take appropriate technical and organisational measures to protect your data against loss, alteration, or unauthorised access. Our website uses HTTPS encryption. Payment pages are fully PCI‑compliant through Stripe.

10. Changes to this policy

If we update this privacy policy, we will change the "Last updated" date at the top of the page. Significant changes will be communicated directly to active customers via email.