Privacy policy
Last Updated: 19 September 2025
thINK Studio (“we,” “us,” or “our”) operates this store and website, including all related information, content, features, tools, products, and services (the “Services”), to provide you with a curated shopping experience. Our Services are powered by Shopify, which enables us to provide a secure and seamless experience.
This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will control regarding the collection, processing, and disclosure of your personal information.
By using our Services, you agree to the terms of this Privacy Policy. Please read it carefully.
Personal Information We Collect
We may collect and process the following categories of personal information (depending on how you interact with us and as permitted by law):
-
Contact Details: name, billing/shipping address, phone number, email.
-
Financial Information: payment card details, transaction data, payment confirmation.
-
Account Information: username, password, preferences, security settings.
-
Transaction Information: products viewed, added to cart, purchased, returned, or exchanged.
-
Communications: details you provide when contacting customer support or otherwise communicating with us.
-
Device Information: IP address, browser, device type, operating system.
-
Usage Information: interactions with the Services, browsing activity, preferences.
Sources of Personal Information
We collect personal information from:
-
Directly from you when you create an account, place an order, or communicate with us.
-
Automatically when you use our Services, including through cookies and similar technologies.
-
Service Providers who process information on our behalf (e.g., payment processors, shipping providers).
-
Partners or Third Parties where legally permitted.
How We Use Your Information
We use personal information to:
-
Provide & Improve Services – process orders, manage your account, fulfill transactions, arrange shipping/returns, personalize your shopping experience.
-
Marketing & Advertising – send promotional messages, provide targeted ads (you may opt out at any time).
-
Security & Fraud Prevention – authenticate accounts, detect/prevent fraud, ensure safe transactions.
-
Customer Support – respond to inquiries and provide assistance.
-
Legal Compliance – comply with applicable laws, respond to government or law enforcement requests, enforce policies.
How We Share Information
We may share personal information with:
-
Shopify (our hosting and e-commerce provider).
-
Vendors & Service Providers (payment processing, shipping, IT, data analytics).
-
Business & Marketing Partners (for advertising and promotions, as permitted by law).
-
Legal & Safety Disclosures (to comply with law, protect rights, prevent fraud).
-
Corporate Transactions (such as a merger, acquisition, or sale of assets).
Relationship with Shopify
Our Services are hosted by Shopify, which collects and processes personal information to operate and improve the platform. Shopify may process data across multiple merchants and services.
Third-Party Links
Our Services may link to third-party websites or platforms. We are not responsible for their privacy or security practices. Please review their policies before providing personal information.
Children’s Data
Our Services are not directed to children under the age of majority in your jurisdiction. We do not knowingly collect information from children. If you believe your child has provided us with personal data, please contact us for deletion.
Security & Retention
We use appropriate safeguards to protect your information, but no system is 100% secure. We retain information as long as necessary to provide Services, comply with legal obligations, resolve disputes, or enforce agreements.
Your Rights & Choices
Your Rights (GDPR – EU Residents)
As a resident of Portugal (and the EU), you have the following rights under the General Data Protection Regulation (“GDPR”):
-
Right of Access – obtain confirmation and a copy of the personal data we hold about you.
-
Right to Rectification – request correction of inaccurate or incomplete data.
-
Right to Erasure (“Right to be Forgotten”) – request deletion of your personal data.
-
Right to Restrict Processing – request limits on how we process your data.
-
Right to Data Portability – receive a copy of your data in a portable format.
-
Right to Object – object to certain types of processing, such as direct marketing.
-
Right to Withdraw Consent – withdraw consent where we rely on it (this will not affect processing already carried out).
You may exercise these rights by contacting us at Info@thinkstudioart.com. We may need to verify your identity before fulfilling your request.
Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.
International Data Transfers
Although thINK Studio only sells and ships within Portugal, please note that your personal information may still be transferred, stored, and processed outside the European Economic Area (“EEA”) by our service providers, including Shopify. When this happens, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses, to protect your personal data.
Changes to This Policy
We may update this Privacy Policy to reflect changes in practices or legal requirements. Updates will be posted here with a revised “Last Updated” date.
Contact Us
For any questions about this Privacy Policy or to exercise your rights, contact us at:
Email: Info@thinkstudioart.com
We are the data controller of your personal information under GDPR.