Privacy Policy
Effective 2026
This English version is a translation provided for convenience; if there is any conflict, the Spanish version controls.
1. Data controller
The Postcard Studio ("the Studio") is operated by The Postcard Studio, S.A., NIT 120976978, based in Guatemala. For any privacy matter, email thepostcardstudiogt@gmail.com or WhatsApp +502 5500 5134.
2. What data we collect
a) Data you give us: name, email, phone or WhatsApp, shipping and billing address, NIT or tax details, and the messages you send us.
b) Custom order material: texts, names, dates, photos, logos or other content you send us to create your piece.
c) Event and workshop data: name, contact details, and information about minors registered by their parent or guardian.
d) Payment data: processed by Tilopay. We do not receive or store full card numbers.
e) Technical data: IP address, browser, device, pages visited and cookies, collected automatically by our website (Wix) and analytics tools.
f) Images: photos and videos taken at events and workshops.
3. Why we use it and our legal basis
To process and deliver orders and create your custom pieces (performance of a contract).
To communicate with you about your order, registration or inquiry (performance of a contract).
For invoicing and tax obligations (legal obligation).
To prevent fraud, handle chargebacks and protect our rights (legitimate interest).
To improve the website and understand how it is used (legitimate interest or consent, depending on the cookie).
To send news, promotions and event announcements (consent; you can withdraw it at any time).
To publish event photos and finished pieces on social media and in our portfolio (consent or legitimate interest, as described in the Terms and Conditions).
4. Who we share it with
We do not sell your data. We only share it with:
Providers that help us operate: our website platform (Wix), payment processor (Tilopay), courier and shipping companies, email and messaging services (for example, WhatsApp and Instagram/Meta), and analytics tools.
Authorities, when required by law or to defend our rights.
A buyer or successor, if the business is sold or merged.
These providers may only use your data to provide their services to us.
5. International transfers
We are a business based in Guatemala, and some of our providers are in the United States or other countries. If you are in the European Union, the United Kingdom or another country with similar rules, your data may be transferred outside your country. Where applicable, we rely on safeguards offered by our providers, such as the Standard Contractual Clauses approved by the European Commission, or on the transfer being necessary to fulfill your order.
6. How long we keep it
Order and billing data: for the period required by Guatemalan tax law.
Custom order material: up to 6 months after delivery, for reprints or claims; then we delete it, unless you ask us to keep it or delete it sooner.
Mailing list: until you unsubscribe.
Published event photos: while they remain published or until you ask us to remove them.
7. Your rights
You may ask us for access to your data, correction, deletion, restriction of or objection to its use, portability to another provider, and you may withdraw your consent at any time. To exercise these rights, email thepostcardstudiogt@gmail.com. We will respond within 30 days and may ask you to confirm your identity. If you are in the European Union or the United Kingdom, you may also file a complaint with the data protection authority in your country. If you are a California resident, we do not sell or share your personal data for targeted advertising, and we will not discriminate against you for exercising your rights.
8. Cookies
We use cookies necessary for the website to work and, with your consent where the law requires it, analytics and marketing cookies. You can accept, reject or change your preferences in the website's cookie banner or in your browser settings.
9. Minors
Our website is not directed at anyone under 18. Data about minors registered for workshops is provided and authorized by their parent or guardian. We do not publish the faces of minors without that permission. If you believe a minor has given us data without permission, contact us and we will delete it.
10. Security
We use reasonable measures to protect your data, including encrypted connections and limited access. No system is 100% secure; if a breach affects your data, we will notify you where the law requires it.
11. Links and social media
Our website may link to Instagram, WhatsApp or other sites. Their use is governed by those platforms' privacy policies, not this one.
12. Changes
We may update this policy. We will publish the new version with its effective date and, if the change is significant, notify you by email or on the website.
13. Contact
The Postcard Studio, S.A. — NIT 120976978 — thepostcardstudiogt@gmail.com — WhatsApp +502 5500 5134 — Guatemala.