Privacy policy
Effective Date: April 16, 2026
1. Introduction
Studio London Design, LLC ("Studio London," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit studiolondondesign.com (the "Website") or make a purchase from us, and describes your rights under US state privacy laws.
This Privacy Policy applies to individuals located in the United States. If you are located in the United Kingdom or European Economic Area and your personal information is processed by Teemo Designs Ltd., please see Section 16 (UK / EEA Residents) below.
2. Company Information and Controller
Studio London Design, LLC is a Wyoming limited liability company and is the business responsible for the personal information collected through studiolondondesign.com. Studio London Design, LLC is a wholly-owned subsidiary of Teemo Designs Ltd., a company incorporated in England and Wales.
Where personal information of US customers is accessed or processed by Teemo Designs Ltd. in the United Kingdom (for example, for administrative support), that processing is governed by an intra-group data processing agreement and appropriate transfer safeguards (Standard Contractual Clauses and/or the UK International Data Transfer Addendum).
Registered Office: 1021 E Lincolnway #9931, Cheyenne, WY 82001
Email: privacy@studiolondondesign.com
3. Scope
This Privacy Policy applies to all personal information we collect in connection with:
-
access to and use of the Website;
-
purchases made through the Website;
-
communications with customer service;
-
marketing and promotional activities (including email and SMS, where you have consented); and
-
interactions with third-party platforms integrated with our services.
4. Categories of Personal Information We Collect
We may collect and process the following categories of personal information about you, in each case collected directly from you, automatically as you interact with the Website, or from third parties as described in Section 5:
|
Category |
Examples |
|---|---|
|
Identifiers |
First and last name, billing address, shipping address, email address, telephone number, customer account identifiers, device identifiers, IP address. |
|
Customer records / commercial information |
Order history, products purchased, transaction details, payment confirmations, returns and claims history, customer service communications. |
|
Financial information |
Payment details are processed by third-party processors; we receive transaction metadata and the last four digits of the card. We do not store full card numbers. |
|
Internet and network activity |
Browser type, operating system, referring URLs, pages viewed, session duration, interactions with Website features. |
|
Geolocation data |
Approximate (non-precise) location derived from IP address. |
|
Inferences |
Inferences drawn from the above to create a profile reflecting preferences, characteristics, predispositions, or behaviors. |
|
Sensitive Personal Information |
We do not intentionally collect sensitive personal information (as defined under CPRA) to infer characteristics about you. Account log-in credentials are handled as sensitive and protected accordingly. |
5. Sources of Personal Information
We collect personal information from the following sources:
-
directly from you, when you place an order, create an account, subscribe to marketing, contact customer service, or interact with the Website;
-
automatically, through cookies, pixels, and similar tracking technologies (see our Cookie Policy);
-
from service providers, including our e-commerce platform (Shopify), payment processors, shipping carriers, and third-party logistics providers; and
-
from marketing and analytics providers that supply aggregated or behavioral insights.
6. Business Purposes for Which We Use Personal Information
We use personal information for the following business purposes (as defined under the CCPA/CPRA and comparable state laws):
-
to process, manage, and fulfill orders, including payment processing, delivery, and returns;
-
to provide customer support, including handling returns, claims, and inquiries;
-
to communicate with you regarding orders, account activity, and service updates;
-
to detect, prevent, and investigate fraudulent or unlawful activity;
-
to comply with legal and regulatory obligations, including tax, accounting, and consumer-protection laws;
-
to improve Website functionality, user experience, and product offerings;
-
to conduct analytics and performance measurement;
-
to send marketing communications and personalized advertising where you have consented or where permitted by law;
-
to operate abandoned-cart recovery and similar transactional communications; and
-
to enforce our Terms and protect our rights and the rights of others.
7. Disclosures to Service Providers and Third Parties
We disclose personal information to the following categories of recipients for the business purposes described above. Each recipient is engaged under a contract that requires the recipient to use personal information only for specified purposes:
|
Category of recipient |
Examples |
|---|---|
|
E-commerce platform |
Shopify Inc. (hosting, checkout, order processing) |
|
Payment processors |
Shopify Payments, PayPal, Klarna, Affirm |
|
Shipping and logistics |
Third-party logistics (3PL) providers and common carriers |
|
Email marketing |
Shopify Email / Klaviyo (or equivalent) |
|
SMS marketing |
Shopify SMS / Attentive / Postscript (or equivalent), where SMS is offered |
|
Analytics |
Google Analytics, Shopify Analytics |
|
Advertising |
Meta (Facebook/Instagram), Google Ads, Pinterest, TikTok (where applicable) |
|
Customer service |
Gorgias, Zendesk, or equivalent helpdesk |
|
Fraud prevention |
Shopify Fraud Analysis and similar screening services |
|
Professional advisors |
Legal, accounting, and tax advisors under confidentiality obligations |
|
Affiliate support |
Teemo Designs Ltd. (UK parent) for administrative and operational support |
We may also disclose personal information to comply with a legal obligation, respond to a subpoena or court order, protect our rights or the rights of others, or in connection with a corporate transaction (merger, acquisition, sale of assets).
8. "Sale" and "Sharing" of Personal Information
We do not "sell" personal information for monetary consideration. However, our use of advertising cookies and analytics technologies may constitute "sharing" personal information for cross-context behavioral advertising (as defined under the CPRA) or "targeted advertising" (as defined under Colorado, Connecticut, Virginia, Oregon, and other state laws).
The categories of personal information shared for these purposes are: Identifiers, Internet and network activity, Geolocation (non-precise), and Inferences.
You have the right to opt out of this sharing at any time. See Section 10 (Your Privacy Rights) and our Your Privacy Choices page for details.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
9. Cookies and Tracking Technologies
We use cookies, pixels, local storage, and similar tracking technologies to operate the Website, analyze usage, and support marketing. Full details, including each cookie we use and its purpose and retention period, are in our Cookie Policy.
You can manage your cookie preferences at any time using the "Cookie Preferences" link in the Website footer. We honor Global Privacy Control (GPC) signals as a valid opt-out of sharing for cross-context behavioral advertising and of sale for the purposes of applicable state laws.
10. Your Privacy Rights
Depending on your state of residence, you may have some or all of the following rights regarding your personal information:
-
Right to Know / Access: request confirmation of whether we process your personal information and to access the specific pieces we hold.
-
Right to Delete: request deletion of your personal information, subject to legal exceptions.
-
Right to Correct: request correction of inaccurate personal information.
-
Right to Data Portability: receive a copy of your personal information in a portable format.
-
Right to Opt Out of Sale / Sharing / Targeted Advertising: opt out of the disclosure of your personal information for cross-context behavioral advertising or targeted advertising.
-
Right to Limit Use of Sensitive Personal Information (where applicable).
-
Right to Non-Discrimination: you will not receive discriminatory treatment for exercising any of these rights.
-
Right to Appeal: if we deny your request, you may appeal our decision (see Section 11).
10.1 California (CCPA / CPRA)
California residents have all of the rights listed above. California law also gives you the right to know the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes for collecting or disclosing, and the categories of third parties with whom we have disclosed personal information. You may designate an authorized agent to make requests on your behalf.
10.2 Virginia (VCDPA)
Virginia residents have the right to access, correct, delete, obtain a portable copy of, and opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
10.3 Colorado (CPA)
Colorado residents have the rights described in 10.2 above, and Colorado requires us to honor universal opt-out mechanisms including Global Privacy Control (GPC).
10.4 Connecticut (CTDPA)
Connecticut residents have the rights described in 10.2 above. Connecticut also requires us to honor universal opt-out mechanisms.
10.5 Utah (UCPA)
Utah residents have the right to access and delete personal information, obtain a portable copy, and opt out of the sale of personal data and targeted advertising.
10.6 Texas (TDPSA)
Texas residents have rights broadly similar to Virginia residents, including the right to opt out of the sale of personal data, targeted advertising, and profiling that produces legal or similarly significant effects.
10.7 Oregon (OCPA)
Oregon residents have rights broadly similar to Virginia residents, with an additional right to obtain a list of the specific third parties to which we have disclosed personal data. Oregon also requires us to honor universal opt-out mechanisms.
10.8 Montana (MCDPA)
Montana residents have rights broadly similar to Virginia residents.
10.9 Delaware (DPDPA)
Delaware residents have rights broadly similar to Virginia residents, with an additional right to obtain a list of the categories of third parties to which we have disclosed personal data.
10.10 Other States
Residents of other states that have enacted consumer privacy laws (including Iowa, Tennessee, Indiana, New Hampshire, Nebraska, Minnesota, Maryland, Kentucky, New Jersey, and others as they come into force) may have analogous rights. We will honor those rights in accordance with each applicable law.
11. How to Exercise Your Rights
To exercise your rights, you may:
-
submit a request through our Your Privacy Choices page at studiolondondesign.com/privacy-choices;
-
email us at privacy@studiolondondesign.com; or
-
write to us at the address in Section 17.
We will verify your identity before fulfilling a request for access, correction, deletion, or portability, typically by matching information you provide with information we already hold. We will respond within the timeframes required by applicable law (generally 45 days, extendable once by 45 additional days where reasonably necessary).
Authorized Agents. You may designate an authorized agent to submit requests on your behalf. We will ask for proof of authorization and may require you to verify your identity directly.
Appeals. If we deny your request, you may appeal by emailing privacy@studiolondondesign.com with the subject line "Privacy Rights Appeal." We will respond to appeals within the timeframes required by applicable law (generally 45-60 days). If your appeal is denied, you may contact your state's attorney general.
12. Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, provide a different level of quality, or suggest that you will receive a different level of quality because you exercised your rights.
13. Data Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy and to comply with legal, tax, accounting, and reporting obligations. Retention periods vary by category of data:
|
Category of data |
Retention period |
|---|---|
|
Order and transaction data |
Up to 7 years (US federal and state tax record-keeping) |
|
Customer account data |
Duration of the relationship plus up to 2 years of inactivity |
|
Customer service communications |
Up to 2 years |
|
Marketing data |
Until you withdraw consent or opt out, plus a reasonable period for suppression lists |
|
Analytics data |
Up to 26 months |
|
Fraud prevention records |
Up to 5 years where necessary to protect legitimate interests |
|
Log and security data |
Up to 12 months |
Where longer retention is required by law, those obligations take precedence. When retention is no longer necessary, personal information is securely deleted or anonymized.
14. International Transfers
Personal information we collect may be transferred to and processed by service providers located in the United States and, for limited administrative support, in the United Kingdom (by Teemo Designs Ltd.).
Where personal information is transferred outside the United States, we use appropriate contractual safeguards, including Standard Contractual Clauses and the UK International Data Transfer Addendum, where required by applicable law.
15. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, multi-factor authentication for administrative access, logging, monitoring, and secure hosting via Shopify's infrastructure (including Shopify Payments' Level 1 PCI DSS certification).
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and applicable state regulators as required by the breach notification laws of the relevant state(s).
16. Automated Decision-Making and Profiling
We do not currently engage in automated decision-making or profiling that produces legal or similarly significant effects on you. Where fraud-screening tools use automated scoring to assess order risk, a human reviews orders before cancellation for suspected fraud. You may contact us to request human review of any adverse decision.
17. Children's Privacy
The Website is directed to adults and is not intended for use by children under 13 years of age. Studio London does not knowingly collect personal information from children under 13, and if we learn we have collected personal information from a child under 13, we will delete it promptly in accordance with the Children's Online Privacy Protection Act (COPPA).
Studio London also does not knowingly "sell" or "share" (as those terms are defined under the CPRA) the personal information of consumers under 16 years of age without the affirmative opt-in consent required by that law.
18. UK and EEA Residents (via Teemo Designs Ltd.)
Where personal information of UK or EEA residents is processed by Teemo Designs Ltd. in connection with Studio London's US operations, that processing is carried out under the UK GDPR and/or EU GDPR, as applicable. UK and EEA residents have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may contact privacy@studiolondondesign.com or the UK Information Commissioner's Office (ico.org.uk) for complaints.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on the Website with an updated "Last Updated" date. For material changes, we will provide additional notice (for example, by email to account holders or a prominent notice on the Website).
20. Contact Details
For privacy inquiries and to exercise your rights:
Studio London Design, LLC
Attn: Privacy
1021 E Lincolnway #9931
Cheyenne, WY 82001
Email: privacy@studiolondondesign.com
Your Privacy Choices: studiolondondesign.com/privacy-choices