PRIVACY POLICY

PRIVACY POLICY Last updated: 2026-06-09

1. Controller

Alignment Studios Oy Y-tunnus: 3477835-5 Finland Contact: martta@epitomemethod.com

2. Personal Data We Process

We may process the following categories of personal data:

  • Contact details (name, email, phone number if provided)

  • Submitted materials (texts, images, links, and other content you provide)

  • Order and billing information (purchases, invoices, payment status)

  • Communication data (emails, messages, voice notes)

  • Technical and usage data (IP address, browser and device info, pages visited, cookies where enabled)

3. Purpose and Legal Basis (GDPR)

We process personal data for the following purposes:

  • Service delivery (Contract)

  • Customer communication and support (Contract / Legitimate interest)

  • Payments and billing (Contract / Legal obligation)

  • Accounting and legal compliance (Legal obligation)

  • Website performance and security (Legitimate interest)

  • Analytics and marketing, if enabled (Consent)

4. Service Providers

We may use third-party service providers, including:

  • Stripe

  • PayPal

  • Klarna

  • Apple Pay

  • Squarespace

These providers process personal data in accordance with their own terms and privacy policies.

5. Cookies

We use necessary cookies to operate the website. Optional cookies (analytics and marketing) are used only with your consent. You can manage preferences via the cookie banner or settings where available.

6. Data Retention

We retain personal data only as long as necessary for:

  • Providing services

  • Fulfilling legal obligations (e.g. accounting requirements under Finnish law, typically 6+ years)

  • Resolving disputes

7. International Transfers

Some service providers may process personal data outside the EU/EEA. In such cases, transfers are based on appropriate safeguards, such as Standard Contractual Clauses (SCCs).

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction

  • Request deletion

  • Restrict or object to processing

  • Withdraw consent where processing is based on consent

  • Request data portability

You also have the right to lodge a complaint with the supervisory authority: Office of the Data Protection Ombudsman (Finland).

9. Security

We use reasonable technical and organizational measures to protect personal data. No system is completely secure.