Contents
1. Data controller
Shapemaker Studios AB is the data controller for the personal data described in this Privacy Policy, unless otherwise stated in a specific service, agreement or form.
Company: Shapemaker Studios AB
Company registration number: 559575-3889
Registered office: Karlstad, Sweden
Contact: privacy@shapemakerstudios.com
2. Scope
This Privacy Policy applies to Shapemaker Studios AB and our websites, services, newsletters and brand activities, including where applicable:
- Shapemaker Studios
- PixaDojo
- Studiokartan
- Screen&Art
- Hallowake
- Convert3Dfiles
- DojoMotion
- Pusselstudion
- Steminote
Some brands or services may have additional terms or notices if they collect or process data in a more specific way.
3. Personal data we collect
The personal data we collect depends on how you interact with us. We only collect data that is relevant for the stated purpose.
| Situation | Examples of personal data |
|---|---|
| Newsletter subscription | Email address, consent status, selected brand interests, subscription source, timestamps, confirmation status and unsubscribe status. |
| Contact forms and email | Name, email address, company or organisation, message content and any information you choose to provide. |
| Purchases and orders | Name, email address, billing and delivery information, order history, payment status and customer service communication. |
| Accounts, courses or digital services | Email address, login information, access rights, course progress, subscription status, support requests and basic technical logs. |
| Website usage | Cookie preferences, device and browser information, approximate location, pages visited, referrals and analytics events, where you have consented to analytics. |
| Business administration | Contact details for customers, suppliers, partners, schools, organisations and other business contacts. |
4. Purposes and legal bases
We process personal data only when we have a purpose and a legal basis under applicable data protection law.
| Purpose | Legal basis |
|---|---|
| Sending newsletters, brand updates and marketing emails you have subscribed to. | Consent. |
| Responding to messages, requests, support questions and business enquiries. | Legitimate interest, or steps prior to entering into a contract. |
| Providing ordered products, digital services, courses, subscriptions or downloads. | Performance of a contract. |
| Managing payments, invoices, bookkeeping, tax and legal obligations. | Legal obligation and performance of a contract. |
| Improving our websites, services and communication through analytics. | Consent, where analytics cookies or similar technologies are used. |
| Protecting websites, systems and services from abuse, fraud, misuse and security incidents. | Legitimate interest. |
5. Newsletters and brand updates
When you subscribe to our newsletter, we process your email address and any selected interests or brand preferences in order to send relevant updates.
We may use double opt-in, which means you must confirm your subscription by clicking a link in a confirmation email before you are added to the mailing list.
You can unsubscribe at any time by using the unsubscribe link included in our emails. You can also contact us to request removal or correction of your information.
Our newsletter service provider may process technical information such as delivery status, consent status, timestamps, bounce information and unsubscribe status in order to operate the newsletter service.
6. Cookies, local storage and analytics
Our websites may use cookies, local storage or similar technologies to provide necessary website functions and to remember your choices, such as your cookie preference.
With your consent, we may use analytics tools such as Google Analytics to understand how visitors use our websites. Analytics may include information such as visited pages, approximate location, browser, device type, referrer and interaction events.
You can control cookies through your browser settings. Where our website provides a cookie banner or consent tool, you can use it to accept or reject analytics cookies.
7. Service providers and recipients
We may share personal data with trusted service providers who process data on our behalf. These providers may only process the data according to our instructions and for the purposes described in this policy or in a specific agreement.
Depending on which service you use, providers may include:
- Email and newsletter platforms, such as Brevo.
- Website hosting, domain, DNS and security providers.
- Analytics providers, such as Google Analytics, where you have consented to analytics.
- Payment providers, checkout providers and ecommerce platforms, where applicable.
- Authentication, database, storage and backend service providers, where applicable.
- Video, course or content delivery platforms, where applicable.
- Accounting, administration and legal service providers, where necessary.
We do not sell your personal data.
8. Transfers outside the EU/EEA
Some of our service providers may process personal data outside the EU/EEA. When this happens, we aim to ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms under data protection law.
9. How long we keep personal data
We keep personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required by law.
- Newsletter data is kept until you unsubscribe or withdraw your consent, unless we need to keep limited information to respect your unsubscribe request.
- Contact and support communication is kept for as long as needed to handle the matter and for a reasonable follow-up period.
- Order, payment and invoice information is kept for as long as required for contracts, accounting, tax and legal obligations.
- Analytics data is kept according to the retention settings used in the analytics service.
- Security logs may be kept for a limited period to protect websites, systems and services.
10. Your rights
Under applicable data protection law, you may have the right to:
- Request access to the personal data we process about you.
- Request correction of inaccurate or incomplete personal data.
- Request deletion of your personal data in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interest.
- Request data portability where applicable.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).
To exercise your rights, contact us using the contact details below. We may need to verify your identity before responding to a request.
11. Security
We use technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. The measures may include access control, secure service providers, encrypted connections, account protection and limited access to personal data.
12. Changes to this Privacy Policy
We may update this Privacy Policy when our services, websites, tools, providers or legal requirements change. The latest version will be published on this page with an updated date.
13. Contact
For questions about this Privacy Policy or how we process personal data, please contact us:
Shapemaker Studios AB
Company reg. no. 559575-3889
Registered office: Karlstad, Sweden