Privacy policy

Who is responsible for your data

Oraya Studios is run by Evan Kristine Monola under Arole Osk (business ID 3343878-9), Tampere, Finland. Arole Osk is the data controller. For any privacy question, email evan@orayastudios.com.

What data I collect

• Shelf Check form: your name, email, store URL, Pinterest profile URL, monthly revenue range, the package you’re interested in and which page you came from.
• Client work: if you hire me, the access you give me (partner access to your Pinterest Business account, a staff account in your store, viewer access to your analytics), the business data I see through that access, and your billing details for invoices.
• Website visits: usage data collected by Google Analytics, such as pages visited, device type and approximate location, and security logs (including IP addresses) kept by the Wordfence security plugin.
• Calls: if you book a call, the details you enter in the booking form (name, email, store website, Pinterest URL), handled by Cal.com.
• Payments: if you hire me, your billing details and card or bank details, handled by Stripe. I never see or store your full card number.

Why I use it, and the legal basis

• To reply to your request and send you an offer: steps you ask for before a contract (GDPR Article 6(1)(b)).
• To deliver the services you buy and send invoices: performance of a contract (Article 6(1)(b)) and legal obligations such as bookkeeping (Article 6(1)(c)).
• To understand how the website is used and keep it secure: legitimate interest (Article 6(1)(f)), or your consent where the law requires it for cookies.

I don’t sell your personal data.

Who else processes your data

I use a small number of service providers to run the website and the business: website hosting (Lyrical Host, on the 20i platform), the email provider behind evan@orayastudios.com, Google (Analytics), Automattic (Akismet spam protection), Defiant (Wordfence security), Cal.com (call bookings), Loom (Shelf Check videos) and Stripe (payments). Some of them may process data outside the EU. In those cases the transfer is protected by the EU’s standard contractual clauses or the EU–US Data Privacy Framework.

How long I keep it

• Contact requests that don’t lead to work: up to 12 months, then deleted.
• Client data: for as long as we work together. When the work ends, I remove my access to your accounts.
• Invoices and accounting records: as long as Finnish accounting law requires.
• Analytics data: according to the retention period set in Google Analytics.

Cookies

The website uses cookies for Google Analytics and for basic WordPress features. You choose which cookies to allow in the cookie banner, and you can change your choice at any time. See the cookie policy for the full list. You can also block or delete cookies in your browser settings.

Your rights

You can ask to see the personal data I hold about you, correct it, delete it, restrict or object to its use, or get a copy of it to take elsewhere. Where I rely on your consent, you can withdraw it at any time. Email evan@orayastudios.com and I’ll reply within 30 days.

You also have the right to complain to the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes to this policy

If this policy changes, the new version will be published on this page with a new date.