Privacy Policy

Last updated: July 2026

Local Vector Studio (“we,” “us,” “our,” or “the Company”), with its registered office in Poland, operates localvectorstudio.com (the “Website”). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have regarding it.

By using the Website, you acknowledge the practices described in this Policy. We are the “data controller” for the personal data described below, within the meaning of the EU General Data Protection Regulation (“GDPR”).

1. What Data We Collect

a) Information you provide directly

  • Account data: name, email address, and password (stored in encrypted/hashed form) when you register.
  • Payment data: billing name, email, and transaction details when you purchase a Subscription or license. Card and payment details themselves are collected and processed directly by our payment processor, Stripe — we do not store your full card number on our servers.
  • Communications: any information you provide when contacting us via our contact form (e.g., name, email, message content).

b) Information collected automatically

  • Usage data: pages visited, time spent, referring URLs, and general interaction data, collected via Google Site Kit / Google Analytics.
  • Device data: IP address, browser type, operating system, and device identifiers.
  • Cookies and similar technologies: used for site functionality, analytics, and advertising (see Section 5).

c) Advertising

We display ads on the Website through Google AdSense. Google may use cookies and device identifiers to serve ads based on your visits to this and other websites. See Section 5 for more on how to control this.

2. How We Use Your Data

We use the data described above to:

  • Create and manage your account;
  • Process payments and deliver purchased Content and licenses;
  • Provide customer support and respond to inquiries;
  • Maintain, secure, and improve the Website;
  • Analyze usage trends and Website performance;
  • Serve advertising through Google AdSense;
  • Comply with legal obligations (e.g., tax and accounting records);
  • Send you marketing communications, but only where you have given prior consent (see Section 7 — we do not currently send marketing emails, but may introduce this in the future).

3. Legal Basis for Processing (GDPR)

Depending on the purpose, we rely on one or more of the following legal bases:

  • Performance of a contract — to create your account, process payments, and deliver Content/licenses.
  • Legitimate interests — to maintain Website security, improve our services, and understand usage patterns.
  • Consent — for non-essential cookies, advertising personalization, and any future marketing communications.
  • Legal obligation — for tax, accounting, and regulatory compliance.

4. Sharing Your Data

We do not sell your personal data. We share data only with:

  • Stripe (payment processing) — receives billing and transaction data necessary to process your payment.
  • Google (Site Kit/Analytics and AdSense) — receives usage and device data for analytics and advertising purposes.
  • Service providers who help us operate the Website (e.g., hosting providers), under contractual confidentiality obligations.
  • Authorities, where required by law, regulation, or legal process.

Some of these providers (including Stripe and Google) may process or store data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect your data.

5. Cookies

The Website uses cookies and similar technologies for:

  • Essential functions — keeping you logged in, remembering your cart/collections.
  • Analytics — understanding how visitors use the Website (Google Site Kit/Analytics).
  • Advertising — serving relevant ads through Google AdSense.

When you first visit the Website, a cookie consent banner (powered by CookieYes) lets you accept or reject non-essential cookies (analytics and advertising) before they are set. You can change your preferences at any time by clicking the “Cookie Settings” link available in the Website footer, or by clearing cookies in your browser to trigger the banner again. Essential cookies cannot be disabled, as they are necessary for the Website to function.

You can also opt out of personalized Google advertising directly via Google’s Ad Settings.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy:

  • Account data — for as long as your account remains active, plus a reasonable period afterward for legal/tax purposes.
  • Payment records — as required by applicable tax and accounting law (typically 5 years under Polish law).
  • Usage/analytics data — in line with Google Analytics’ standard retention settings, unless configured otherwise.

7. Marketing Communications

We do not currently send newsletters or marketing emails. If we introduce this in the future, we will only send such communications to users who have given explicit, opt-in consent (e.g., by checking a box during signup), and every email will include a clear way to unsubscribe at any time.

8. Your Rights (GDPR)

If you are located in the EEA/UK (or otherwise protected by GDPR), you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data (“right to be forgotten”), subject to legal exceptions;
  • Restrict or object to processing in certain circumstances;
  • Data portability — receive your data in a structured, machine-readable format;
  • Withdraw consent at any time, where processing is based on consent;
  • Lodge a complaint with your local data protection authority — in Poland, the Urząd Ochrony Danych Osobowych (UODO).

To exercise any of these rights, contact us via our contact form.

9. Children’s Privacy

The Website is not directed at children under 16. We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Data Security

We implement reasonable technical and organizational measures (e.g., encryption, access controls) to protect your personal data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date above, and where appropriate, we will notify registered users directly.

12. Contact Us

For questions about this Privacy Policy or to exercise your data rights, please contact us via our contact form.