Privacy
Privacy Policy
This is the page where we tell you what happens to your information when you visit our site, place an order, or send us your family's recipe card. We've tried to write it the way we'd want it written if we were on the other side of the screen: plainly, honestly, and without burying anything important.
If you have a question after reading this, email us at hello@tastefully.studio and a real person will write back.
Who "we" are
"We" means Tastefully Studio, a brand operated by RILL Ltd. We're the small business that turns handwritten recipe cards into framed prints. Our website lives at tastefully.studio, and our app, where you actually upload your card and place an order, lives at app.tastefully.studio.
What we collect
When you place an order, we collect your name, your shipping address, your email address, and the photo of the recipe card you want printed. We also receive a confirmation of your payment from Stripe, but we never see your full card number or banking details.
When you sign up for our emails, we collect your email address and whatever else you choose to share (your name, what kind of cards you're interested in).
When you browse the site, we collect things every website collects: your IP address, what browser and device you're using, which pages you visited, what you clicked on, and roughly where in the world you are. This is the unavoidable plumbing of the modern web.
When you record a session through Microsoft Clarity (one of our analytics tools), we collect a video of your mouse movements, scrolls, and clicks. We do not record what you type into form fields, your payment information, or any other sensitive input. We use these recordings to understand where the site is confusing and fix it.
How we use what we collect
We use it to:
- Print your recipe card and ship it to you
- Send you confirmation that your order was placed, that it's been printed, and that it's been shipped
- Reply to you if you contact us
- Send you marketing emails, but only if you've signed up for them, and only until you unsubscribe (which is one click in any email we send)
- Show you ads that are more relevant than random ones, on Facebook, Instagram, and elsewhere
- Understand which parts of our site are working and which are confusing, so we can make it better
That's it. We do not sell your data. We do not share your data with anyone we haven't listed below. We do not use your uploaded photo to train any system, ours or anyone else's.
Who we share it with
To run our business we have to share some of your information with the companies who help us deliver your order. We've listed each of them below, along with what they receive and why. We share only what each company needs, and nothing more.
- Stripe: your payment information and billing address. Stripe handles all card processing on our behalf. We never store your card number.
- Prodigi: your name, shipping address, and the final printed image. Prodigi is the print-on-demand company that physically prints your card and ships it to your door.
- Image processing partners: your uploaded photo, briefly, while it's being prepared for printing. The image is processed and returned to us; our partners do not retain it or use it for any other purpose.
- Resend: your email address and order details. Resend sends you the transactional emails (order confirmation, shipping confirmation, etc).
- Klaviyo: your email address, and only if you've opted in to marketing emails. Klaviyo is our marketing email platform.
- Netlify: the hosting provider for both our website and our app. They handle the technical delivery of our pages to your browser, and they store your uploaded image, the processed version, and the print-ready file securely so we can fulfill your order and re-send a print if you ever need a replacement.
- Meta (Facebook and Instagram): event data about which pages you visit, what you click, and when you upload a photo, add to your cart, or place an order (with the order's value). It reaches Meta through the Meta Pixel in your browser and through Meta's Conversions API from our servers, which can include your email address, phone number and ZIP code in a scrambled (hashed) form so Meta can match the event to an account. We use Meta to show you ads and to measure whether our ads are working.
- Google Analytics: anonymized event data about your visit. We use it to understand traffic patterns and improve the site.
- Microsoft Clarity: your session recording (with form fields automatically masked) and aggregated heatmap data. We use Clarity to see where our site is confusing.
We are happy to delete you from any of these systems at your request. Email hello@tastefully.studio with the subject line "Privacy request" and tell us what you'd like.
Your photos, specifically
Your uploaded photo is special, and it's the thing people understandably care most about. Here's how we treat it.
We keep it for as long as we need it to fulfill your order, plus a reasonable window afterward in case you need a replacement print or have a question. After two years from your last order, or sooner if you ask us, we delete it.
We never use your photo to train any system, ours or anyone else's.
We never publish your photo anywhere. No social media, no marketing materials, no showroom. If we ever want to use a photo of yours publicly (because it's a beautiful card and we'd love to feature it), we will ask you first and never assume yes.
You can ask us to delete your photo at any time, even before two years are up, by emailing hello@tastefully.studio.
Your rights
Depending on where you live, you have some or all of the following rights:
- The right to know what data we have about you, and to receive a copy of it
- The right to correct anything that's wrong
- The right to delete your data, though we may need to keep certain records (like sales records) for tax or legal reasons
- The right to opt out of marketing emails, which you can do with the unsubscribe link in any email we send
- The right to opt out of certain types of tracking or advertising
- The right to object to how we're using your data, in some cases
To exercise any of these, email hello@tastefully.studio with the subject line "Privacy request." We'll respond within 30 days, usually faster.
If you live in California, the California Consumer Privacy Act (CCPA) gives you additional rights, including the right to know specifically what categories of personal information we collect and the right to a copy of your information in a portable format. We do not sell your personal information. We do use the Meta Pixel to measure how our Facebook and Instagram ads perform, and under the CCPA that can count as "sharing" information for advertising. You can opt out of it in two ways: turn on Global Privacy Control in your browser, which we honor automatically (the Meta Pixel and Microsoft Clarity don't load at all), or email hello@tastefully.studio with the subject line "Privacy request."
If you live in the European Union or the United Kingdom, the GDPR and UK GDPR give you additional rights, including a right to data portability and the right to lodge a complaint with your local data protection authority if you believe we've handled your data improperly.
How long we keep things
- Order records (name, address, what you bought): seven years, because US tax law requires it
- Marketing email subscriptions: until you unsubscribe
- Uploaded photos and processed images: up to two years from your last order, or sooner if you request deletion
- Analytics data: as long as Google, Meta, and Microsoft retain it on their platforms, which is typically two years
- Customer support emails: three years, in case you ever come back with a follow-up question about a past order
Cookies and tracking
We use a small number of cookies and similar technologies, all of them in service of running the site or improving it.
Some are strictly necessary, like the cookie that remembers what's in your cart or the one that keeps you logged in if you have an account. We can't turn those off without breaking the site.
Others are analytics cookies (Google Analytics, the Meta Pixel, Microsoft Clarity). These are how we learn whether our site works. You can disable them by adjusting your browser settings, using a tracking-blocker extension, or by turning on Global Privacy Control in your browser. We honor that signal: when your browser sends it, the Meta Pixel and Microsoft Clarity don't load.
We use the Meta Pixel and Meta's Conversions API for advertising and measurement. If your browser sends Global Privacy Control, we don't track you with either of them: the Meta Pixel doesn't load and nothing about your visit or your order is sent to Meta from our servers.
Children's data
Our site and our products are not directed at children under the age of 13 in the United States, or under 16 in the European Union. We do not knowingly collect data from anyone in this age range. If you're a parent or guardian and you believe we've collected your child's information by mistake, email hello@tastefully.studio and we will delete it.
If you're outside the United States
We're based in the United States, and any data you give us is processed and stored in the United States or by the partners listed above, some of whom may be in other countries. By using our site, you agree to your information being transferred to and processed in the United States. If you're in the EU or UK, we use the appropriate legal safeguards (standard contractual clauses) when transferring data across borders.
Security
We use industry-standard security measures to protect your information: encrypted connections (HTTPS), encrypted storage at rest, restricted access to sensitive data on our team. No system is perfectly secure, but we take this seriously and would notify you promptly if we ever became aware of a breach affecting your personal information.
Changes to this policy
If we change anything material about how we handle your information, we'll update the date at the top of this page and let you know by email if we have your address. The current version is always live at tastefully.studio/privacy.
How to reach us
For any privacy question, request, or concern:
Email: hello@tastefully.studio
Subject line: Privacy request (or just whatever's on your mind)
A real person will write back.