white studio

    Privacy Policy

    Version: October 4, 2026

    White Studio uses the information described here to operate furniture image and video services. For privacy questions or requests, contact hi@whitestudio.art.

    1. Information we handle

    • Your email address, sign-in verification records and essential authentication cookie.
    • Order references, product and brand details, scripts, instructions, uploaded photos, delivered files, payment status, and the terms version and time you accepted.
    • Technical and security logs, such as access times and IP addresses. Optional analytics is described separately below.

    Stripe handles card details. We receive payment and transaction information, not your complete card number. Do not submit sensitive personal records, payment details, or other people’s personal data as production references.

    2. Why we use it

    We use this information to authenticate you, validate materials, produce and review files, deliver orders, handle support and refunds, prevent fraud, and keep necessary accounting and legal records. Where applicable law requires a legal basis, order processing supports our contract with you; security and basic administration support legitimate interests; mandatory records support legal obligations; optional analytics uses consent.

    3. Production providers and AI

    Production may involve third-party AI services, production tools and authorised personnel who need access to your references. Hosting and storage services support files and accounts; Stripe supports payments; our email provider supports verification and service messages. We limit sharing to the information needed for those tasks.

    We do not use your uploaded materials to train our own models or publish them as examples without separate permission. Third-party AI providers may process or retain materials under their own service terms. Contact us before uploading confidential or unreleased designs so we can confirm the providers, account settings and handling appropriate for your order. We do not make an unqualified promise about every provider’s training or retention practices.

    Providers may process information outside your country. Where applicable law requires transfer safeguards, the relevant contractual or other lawful safeguards must be in place. You may request information about the providers and safeguards used for your order.

    4. Cookies and optional analytics

    An essential cookie keeps you signed in and enables order access. The site also requests its typefaces from Google Fonts; Google receives the connection information needed to serve those font files, such as your IP address and browser details. Your analytics choice is stored in your browser. If Google Analytics is configured, it loads only after you choose “Allow analytics”. It measures visits to public pages; order pages, account pages, uploaded files and production briefs are excluded from analytics.

    You can select “Essential only” or change your choice through “Privacy choices” in the footer. Declining analytics does not affect ordering. Withdrawing consent stops future analytics; it does not erase information previously processed. We also treat a browser Global Privacy Control signal as a request not to enable optional analytics.

    5. Retention

    Download and save delivered files within 30 days of delivery. Expired order files are removed from active upload and delivery storage during regular cleanup. Source files still needed to complete a paid order are retained until that production is complete. Necessary order, payment and acceptance records are retained for account administration, accounting, legal obligations and disputes. Copies retained for a documented dispute or required legal purpose are limited to that purpose; deleting active files does not promise immediate erasure from every service provider or backup.

    Unpaid orders may be removed when no longer needed. If you want your account or materials deleted sooner, contact us; we will explain any records that must remain.

    6. Security and your choices

    We use access controls and protected production systems. No service can promise absolute security. Keep control of your sign-in email and tell us promptly about unauthorised access.

    Depending on the law that applies to you, you may request access, correction, deletion, portability, restriction or objection to processing, or withdraw consent. We verify requests proportionately and respond as required by applicable law. You may also contact your local privacy regulator. We do not sell customer contact details or production materials to data brokers.

    7. Intended users and changes

    The service is intended for adults ordering on behalf of a business. We do not knowingly provide accounts to children under 18. Policy changes are published here, and material changes are communicated where required; continued use is not treated as blanket consent to unrelated new uses of your information.