Privacy policy

Last updated 22 October 2026

Dusk Studios operates this store and website, including all related information, content, features, products and services (the "Services"). This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase or otherwise communicate with us. If there is a conflict between our Terms and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

Who we are

The controller of your personal information is Vanesa Dušková (Dusk Studios), IČO 21598916, Školní 324/5, 351 01 Františkovy Lázně, Czechia, email [email protected].

Personal information we collect

"Personal information" means information that identifies or can reasonably be linked to you. Depending on how you use the Services, we collect:

• Contact details: your name, shipping and billing address, email address and, if you give it, phone number.
• Payment information: payment confirmation, payment method type and transaction details. Your card details are entered directly with our payment provider Stripe; we never see or store your full card number.
• Transaction information: the items in your cart, what you buy, return or cancel.
• Communications with us: what you write to us by email or through the contact form.
• Device information: your IP address and basic browser information, which our hosting and security providers process when you load the website.

We collect this information directly from you, automatically through the Services (see Cookies below), and from our service providers when they process it on our behalf.

How we use your personal information

• Providing the Services and fulfilling orders: to process your payment, ship your order, handle returns and send you order-related emails. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Communicating with you: to answer your questions and provide customer support. Legal basis: our legitimate interest in replying to you (Art. 6(1)(f) GDPR), or the contract if it concerns an order.
• Security and fraud prevention: to provide a secure payment and shopping experience and to protect the website against fraud and attacks. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Legal reasons: to keep accounting and tax records, comply with applicable law and respond to valid requests from authorities. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not sell your personal information, send marketing emails or use advertising or analytics tracking.

Who we share it with

We share personal information only with providers who help us run the Services, and only as much as they need:

• Stripe (Stripe Payments Europe Ltd., Ireland) processes payments and checks them for fraud.
• Netcup (netcup GmbH, Germany) hosts the website, the shop and its database.
• Cloudflare (Cloudflare, Inc., USA) delivers the website and protects it against attacks.
• Resend (Resend, Inc., USA) delivers our emails, such as order confirmations and contact form messages.
• Websupport (Websupport s.r.o., Slovakia) hosts our email inbox.
• The shipping carrier receives your name, address and phone number to deliver your order.

We may also disclose personal information when the law requires it, to enforce our terms, or to protect our rights or the rights of others.

Cookies

We use only cookies that are necessary for the website to work, so no consent is needed:

• _dusk_cart_id remembers your cart for 30 days.
• Stripe sets cookies during checkout to process your payment securely and prevent fraud.
• Cloudflare may set a cookie to tell people apart from malicious bots.

Your browser also stores a note that you have seen the cookie notice. There are no analytics or advertising cookies.

Third-party websites and links

The Services may link to websites operated by third parties, such as Instagram. We are not responsible for the privacy or security of those sites, so please review their own policies.

Children's data

The Services are not intended for children, and we do not knowingly collect personal information about children under the age of majority. If you are the parent or guardian of a child who has given us their personal information, contact us and we will delete it.

Security and retention

We protect your information with encrypted connections and limited access, but no security measures are perfect. Please do not send us sensitive information through unsecured channels.

We keep personal information only as long as we need it: order and invoice data for as long as Czech accounting and tax law requires, and other communication until it is resolved, unless we need it to settle a dispute or enforce our terms.

Your rights

Under the GDPR you have the right to:

• access the personal information we hold about you,
• have inaccurate information corrected,
• have your information deleted,
• receive a copy of your information and have it transferred to someone else (portability),
• object to or ask us to restrict processing based on our legitimate interest,
• withdraw consent at any time where we rely on consent, without affecting earlier processing.

To exercise any of these rights, email [email protected]. We may need to verify your identity first, and we will respond within the time required by law. We will not treat you differently for exercising your rights.

Complaints

If you have a complaint about how we process your personal information, please contact us first. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or with the data protection authority in your country.

International transfers

Some of our providers (Cloudflare, Resend, and Stripe for some processing) may process your information outside the European Economic Area, mainly in the USA. In that case we rely on recognised transfer mechanisms, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or for legal or regulatory reasons. We will post the updated version here and change the "Last updated" date.

Contact

If you have questions about this Privacy Policy or want to exercise your rights, email [email protected] or write to Dusk Studios, Školní 324/5, 351 01 Františkovy Lázně, Czechia.