Privacy policy

Last updated: 10 September 2026. Northline Creative Ltd, trading as Anren Studio, is the controller of personal data processed through anrenstudio.com.

Personal data we collect

We collect information you provide when ordering or contacting us, including your name, email address, phone number, billing and delivery address, order details, and communications. We also collect payment confirmation and transaction information, but not complete card numbers. When you browse the site, we may receive device, browser, IP address, cookie, and usage information.

How we use personal data

We use personal data to process and deliver orders, provide customer service, communicate about your order, prevent fraud, maintain security, comply with legal obligations, and improve the store. We send marketing only where permitted and you can unsubscribe from promotional messages at any time.

Retention

We retain order and transaction records for up to 7 years where required for accounting, tax, or legal purposes. Other personal data is kept only as long as needed to provide services, resolve disputes, enforce agreements, or meet legal obligations.

How we disclose personal data

We may share relevant data with Shopify, which hosts and operates the ecommerce platform; payment processors that complete checkout; PostNord and fulfilment partners that deliver orders; technology, fraud-prevention, and support providers; and advisers or authorities where law requires. We may also disclose data in connection with a business transfer, merger, or legal claim. We do not sell personal data.

Shopify hosting

Our store is hosted by Shopify. Shopify processes personal information required to provide the store and checkout, subject to its own privacy practices and applicable law.

International transfers and security

Your information may be processed outside your country, including where service providers or fulfilment partners operate. Where required, we use recognised safeguards such as contractual protections. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Your GDPR rights

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of your data; object to certain processing; withdraw consent where processing relies on it; and request data portability. You may also complain to the relevant data-protection authority. Contact us to exercise these rights.

Cookies and third-party links

We use cookies and similar technologies that are necessary to operate the store, and optional technologies where you consent through available privacy controls. The site may link to third-party websites. We do not control or guarantee their privacy or security practices, and a link is not an endorsement.

Children and changes

The store is not intended for children under 16, and we do not knowingly collect their personal data. We may update this policy for operational, legal, or regulatory reasons; the current version will be posted here with an updated date.