Privacy policy

We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights. You can contact us any time to ask questions, opt out, or request data deletion.

Privacy Policy

This Privacy Policy explains how Skylit Studio Limited ("we", "us", or "our") collects, uses, and protects your Personal Information when you visit or make a purchase from skylitstudio.co.uk (the "Site").

Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy, please contact us at:

📧 Email: [email protected]
📍 Registered Office: Skylit Studio Limited, 65 Old Road, Manchester, M9 8BF, United Kingdom

---

1. What Personal Information We Collect & Why

We collect different types of Personal Information to provide and improve our services.

1.1 Device Information

📌 Purpose: To load the Site properly, analyze website traffic, optimize performance, and understand which devices our customers use when creating their personalised designs so we can improve the experience and measure advertising effectiveness.
📌 How We Collect It: Automatically via cookies, log files, web beacons, and tracking technologies; additionally, when you save or add a personalised design to your cart, we capture a snapshot of your browsing device context.
📌 Personal Data Collected:

• IP address
• Web browser name and version
• Time zone
• Device category (mobile, tablet, or desktop), operating system, and viewport dimensions, captured once when a personalised design is first saved to our backend
• Pages viewed, search terms, and interactions with the Site

📌 Disclosure: Shared with our service provider Shopify for analytics and site functionality (read Shopify's privacy policy here), and stored on our own order-management backend hosted on Cloudflare for service improvement and advertising-performance reporting. We do not share the device snapshot with third-party advertisers as a standalone signal.

1.2 Order Information

📌 Purpose: To process your purchase, arrange delivery, send invoices, and screen orders for fraud.
📌 How We Collect It: Directly from you during checkout.
📌 Personal Data Collected:

• Name, billing & shipping address
• Payment details (e.g., credit card information)
• Email address & phone number
  📌 Disclosure: Shared with Shopify and payment processors (e.g., PayPal, Clearpay, Klarna) for secure transactions.

1.3 Customer Support Information

📌 Purpose: To assist with inquiries, order issues, and customer service requests.
📌 How We Collect It: Directly from you when you contact us.
📌 Personal Data Collected: Name, email, order details, and correspondence.

1.4 Personalised Product Customization Data

📌 Purpose: To create personalized star maps and save your customizations for a seamless experience.
📌 How We Collect It: Directly from you when designing a star map on our Site.
📌 Personal Data Collected:

- Location information (addresses, latitude/longitude coordinates)
- Dates and times selected for star map creation
- Custom messages, titles, and dedications
- Design preferences (colours, styles, frames, fonts)
- Order-specific identifiers for retrieving and modifying designs
- Browser cookies to save design progress and preferences

📌 Why We Need This Data: This information is essential for the core functionality of our star map creator. We need location and date/time data to accurately generate celestial maps showing the stars for your chosen location and moment. Your preferences and customizations are saved to allow you to revisit and modify your design before finalizing your purchase.

📌 Disclosure: This information is processed by our design-generation software and securely stored on our own order-management backend hosted on Cloudflare and with our e-commerce provider Shopify. Cloudflare provides industry-leading security measures including encryption at rest and in transit, access controls, and regular security audits. Your star map design is saved using a unique identifier that allows you to return to your design later while maintaining data security. All data transfers between your browser and our servers are encrypted using HTTPS protocols to ensure your information remains private.

📌 Data Retention: Your star map design data is retained for 30 days after creation to allow for modifications and reprints. If you create a customer account, your design data may be retained longer to facilitate reorders and allow you to access your previous designs. You may request deletion of this data at any time by contacting us at [email protected].

1.5 Enhanced Services and Shopify Network Intelligence

📌 Purpose: Our store is hosted by Shopify, which uses Shopify Network Intelligence to provide Enhanced Services. These services help protect, grow, and improve our business and other merchants' businesses through features that incorporate data from customer interactions across multiple stores.

📌 How We Collect It: Shopify processes your data when you visit and make purchases on our store, including to provide services based on your interactions with other merchants and with Shopify.

📌 Personal Data Collected:

- Your browsing behaviour across our store and other Shopify merchants
- Purchase history and transaction patterns
- Product interactions and preferences
- Customer service interactions
- Marketing engagement data

📌 Why We Need This Data: Enhanced Services use this information to provide improved fraud protection, personalized shopping experiences, better product recommendations, and enhanced advertising capabilities.

📌 Disclosure: Your information is processed by Shopify's Enhanced Services platform and may be used alongside data from other merchants to provide these services. This may include targeted advertising based on your activity across different merchant stores and with Shopify. Under certain privacy laws, this may constitute "sharing" or "targeted advertising."

---

2. Minors & Data Protection

We do not knowingly collect Personal Information from children under 16. If you believe a child has provided information, please contact us immediately to request deletion.

---

3. Sharing Personal Information

We share Personal Information only when necessary for legal compliance, service fulfillment, or business operations.

🔹 Third-Party Providers: We use Shopify for our e-commerce platform. Read their Privacy Policy here.

🔹 Shopify Consumer Privacy: As a Shopify-hosted store, customer data is also subject to Shopify's Consumer Privacy Policy, which you can review here.

🔹 Enhanced Services: We participate in Shopify's Enhanced Services program, which means your data may be processed alongside data from other merchants to provide improved services, fraud protection, and personalized experiences. This may constitute "sharing" or "targeted advertising" under certain privacy laws.

🔹 Ad Measurement Services: We share customer data (including email addresses, phone numbers, names, addresses, and purchase information) with Google and Meta (Facebook) to measure the effectiveness of our advertising campaigns through their Enhanced Conversions and Enhanced Matching features. This data is hashed (encrypted) before transmission and used only for conversion attribution and measurement purposes. These platforms will not use this data for purposes other than measuring our advertising effectiveness or share it with other advertisers.

🔹 Legal Compliance: We may disclose data if required by law (e.g., responding to subpoenas or regulatory authorities).

🔹 Advertising & Analytics: We work with Google Analytics, Google Ads, Facebook Ads, and other platforms for targeted marketing and measurement. You can opt out of Google Analytics here.

3.1. Lead Forms (Google, Meta & Other Platforms)

What this covers. From time to time, we run lead generation campaigns through advertising platforms including Google Ads (Lead Form Extensions) and Meta (Facebook and Instagram Lead Ads). These ads include instant forms where you can choose to share details such as your name, email, and phone number ("Lead Form Data") with us.

Who controls your data. When you submit a lead form to us through any platform, Skylit Studio Limited is the data controller of your Lead Form Data. That data is governed by this Privacy Policy and any notices or offer terms shown in the form at the time of submission.

How we use Lead Form Data. We will use your Lead Form Data only for the limited purpose described in the lead form (for example, to send a price list or brochure, provide a quote, subscribe you to our newsletter if you've opted in, or follow up about our star maps). We will not augment, commingle, or supplement your Lead Form Data with data from other advertisers.

Our Commitments Regarding Lead Form Data

We make the following commitments regarding information you provide through lead forms:

• No Sale of Data: We will never sell your Lead Form Data to third parties.
• No Data Brokers: We will not license or disclose your Lead Form Data to any data broker.
• No Abuse or Spam: We will not abuse your information by spamming you with repeated phone calls, emails, or other communications beyond what you have consented to receive.
• Purpose Limitation: We will only request and use your information as reasonably necessary for the specific purpose described in the lead form.

Sharing & transfers. We may share Lead Form Data with our processors strictly to fulfil the purpose stated on the form (e.g., email service provider Klaviyo for newsletters you opted into; ecommerce systems such as Shopify for customer management). If we ever transfer Lead Form Data to another party, it will be only so they can fulfil the same purpose disclosed at the time of collection.

Consent & legal compliance. We provide clear and comprehensive information about data collection and processing in our lead forms. We obtain consent where legally required and comply with all applicable laws and regulations when contacting you, including:

• UK Privacy and Electronic Communications Regulations (PECR)
• UK GDPR and EU GDPR
• Applicable anti-spam and marketing regulations

Minors. We do not target lead forms to, or knowingly collect Lead Form Data from, individuals under 18. Please do not submit a form if you are under 18.

Offer terms. Where a lead form includes an offer (e.g., discount), the form will include the key terms such as eligibility, expiry date, and any redemption limits. Those terms apply in addition to this Privacy Policy.

Security & retention. We apply appropriate technical and organisational measures to protect Lead Form Data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. Lead Form Data is retained only as long as needed to deliver the stated purpose or as required by law.

Your rights & opting out. You may withdraw consent or opt out of marketing at any time by:

• Using the unsubscribe link in our emails
• Contacting us at [email protected]
• Managing your ad preferences directly in your Google or Meta account settings

Platform policies. Our use of lead forms complies with the policies and terms of each advertising platform, including Google's Lead Form Terms and Meta's Lead Ads Terms and Advertising Policies.

---

4. Behavioural Advertising & Tracking Technologies

📌 Consent-Based Tracking
We use a cookie consent banner to obtain your permission before enabling analytics or advertising tools. You can manage your preferences at any time via the banner or by clearing cookies in your browser.

📌 Google Consent Mode v2
We implement Google Consent Mode v2 to ensure our Google tags (Analytics, Ads) respect your cookie preferences. When you interact with our cookie banner, your choices are communicated to Google through the following consent signals:

• ad_storage - Controls advertising cookies
• ad_user_data - Controls sending user data for advertising purposes
• ad_personalization - Controls personalized advertising
• analytics_storage - Controls analytics cookies
• personalization_storage - Controls cookies for personalization features

By default, all tracking consent is set to "denied" until you provide consent through our cookie banner. This ensures no tracking occurs before you make an informed choice.

📌 Google Signals & Cross-Device Tracking
We use Google Signals to enhance our analytics with aggregated data from users who have turned on Ads Personalisation in their Google accounts. This allows us to:

• Understand how users interact with our site across multiple devices
• View aggregated demographics and interests data (age, gender, interests)
• Create more relevant advertising audiences

This data is only collected from users who are signed into their Google account and have enabled Ads Personalisation. You can control this data and opt-out via Google My Activity or Google Ads Settings.

4.1 Advertising & Analytics Partners

We share limited customer data (such as browsing behavior, purchase history, and ad interactions) with the following platforms for advertising and performance tracking:

✅ Google Ads & Google Analytics 
✅ Facebook & Instagram Ads (Meta)
✅ TikTok Pixel & TikTok Ads 
✅ Pinterest Ads & Conversion Tracking
✅ Microsoft Bing Ads
✅ Klaviyo Email Marketing & SMS Marketing

4.2 Enhanced Conversions & Conversion Measurement

What are Enhanced Conversions?

We use Google's Enhanced Conversions and Meta's Enhanced Matching features to improve the accuracy of our conversion tracking and advertising measurement. This involves sharing customer data with these platforms to match your purchases or form submissions to the ads you interacted with.

How Enhanced Conversions Work

When you complete a purchase or submit a form on our website, your information may be automatically collected by our tracking tags (Google tags, Meta Pixel) and uploaded to Google's and Meta's servers. This data includes:

Data Shared with Google & Meta:

- Email addresses (hashed/encrypted)
- Phone numbers (hashed/encrypted)
- Names and addresses (hashed/encrypted)
- Purchase transaction details
- Form submission information
- Order values and product information

The data is hashed (encrypted) using SHA256 before being transmitted, meaning your actual email address or phone number is converted into an unreadable string of characters. Google and Meta then match this hashed data against hashed data from their user accounts to determine if your purchase resulted from clicking one of our ads.

Why We Use Enhanced Conversions

Enhanced conversions help us:

- Measure which ads are most effective
- Understand our return on advertising investment
- Improve our advertising campaigns
- Show you more relevant ads
- Optimize our marketing budget

Your Data Protection

✅ Hashed Before Transmission: All personally identifiable data is hashed (encrypted) before leaving your browser
✅ Secure Transmission: Data is sent using HTTPS encryption protocols
✅ Limited Use: Google and Meta use this data only for conversion measurement, not for other purposes
✅ No Sharing with Other Advertisers: Your data will not be shared with other advertisers
✅ Industry Standards: Google and Meta employ industry-leading security measures to protect your data

Automatic Data Collection

When you enable cookies on our site through our consent banner, our Google tags and Meta Pixel may automatically detect user-provided data from forms on our website, including:

- Checkout forms (email, phone, address)
- Contact forms
- Newsletter signup forms
- Account registration forms

This automated collection only occurs after you have provided consent through our cookie banner.

Your Rights & Control

By using our website and making purchases with cookies enabled, you consent to this data sharing for ad measurement purposes. You can:

✅ Withdraw Consent: Adjust your cookie preferences via our cookie banner at any time
✅ Opt Out of Tracking: Disable marketing/advertising cookies (note: this may affect your ability to see relevant ads)
✅ Request Deletion: Contact us to request deletion of your data
✅ Control Ad Personalization: Manage your ad settings directly with Google and Meta (see links below)

Learn More

For more information about how Google and Meta handle enhanced conversion data:

- Google's Enhanced Conversions Policy
- Meta's Business Tools Terms

4.3 Google Customer Match & Audience Lists

What is Customer Match?

We use Google Customer Match to create targeted advertising audiences. This feature allows us to share customer data with Google to reach you with relevant ads across Google services (Search, Shopping, YouTube, Gmail, and Display Network) and to create "similar audiences" to find new potential customers.

How Customer Match Works

When you make a purchase or interact with our website, we may upload certain customer information to Google Ads to create custom audience lists. This data includes:

Data Shared with Google for Customer Match:

- Email addresses (hashed/encrypted)
- Phone numbers (hashed/encrypted)
- Names and postal addresses (hashed/encrypted)
- Purchase history and customer segments

This data is hashed (encrypted) using SHA256 before being uploaded to Google. Google then matches this hashed data against Google account information to identify users for targeted advertising.

Why We Use Customer Match

Customer Match helps us:

- Show relevant ads to existing customers about products they may like
- Re-engage customers who haven't visited recently
- Exclude existing customers from acquisition campaigns
- Find new customers similar to our existing audience
- Provide more personalized advertising experiences

Legal Basis & Consent

We confirm that:

• This Privacy Policy discloses that we share customer data with third parties (including Google) to perform advertising services on our behalf
• We obtain consent for such sharing where required by law or any applicable Google policies governing personalised ads and/or user consent, including compliance with Google's EU User Consent Policy
• Your data will only be used to match your information to Google accounts and to ensure our Customer Match campaigns comply with Google's policies

Google as Data Processor

To comply with the General Data Protection Regulation (GDPR), Google acts as a 'processor' of the personal data we share for Customer Match purposes. This relationship is governed by the Google Ads Data Processing Terms, which are incorporated into the Google Ads terms of service.

Your Rights & Control

You can control how your data is used for Customer Match:

✅ Opt Out of Personalized Ads: Visit Google's Ad Settings to control personalized advertising
✅ Request Removal: Contact us at [email protected] to request removal from our Customer Match lists
✅ Withdraw Consent: You can withdraw consent for this data sharing at any time by contacting us

For more information, see Google's Customer Match Policy.

4.4 Use of Klaviyo for Marketing

We use Klaviyo for email and SMS marketing, which allows us to send you updates, promotions, and personalized recommendations based on your interactions with our website. When you subscribe to our newsletter or provide your email at checkout, we may collect and process:

📌 Your name and email address (for email newsletters & exclusive offers)
📌 Purchase history and browsing behavior (to send relevant product updates and promotions)
📌 Cart abandonment reminders (to notify you of items left in your cart)
📌 Personalized discounts & offers (based on your interactions with our store)

You can unsubscribe from marketing emails at any time using the "Unsubscribe" link in our emails or by contacting us at [email protected].

4.5 Use of Microsoft Clarity

We use Microsoft Clarity, a behavioral analytics tool, to better understand how visitors interact with our website. Clarity captures user engagement, including mouse movements, clicks, and scrolling behavior, to help us improve our website's usability and design.

Microsoft may process data collected through Clarity in accordance with its Privacy Statement, which you can review here: https://privacy.microsoft.com/en-us/privacystatement.

If you wish to opt-out of Clarity's tracking, you can do so by adjusting your browser settings or using the Microsoft opt-out page.

These tools use cookies, pixels, and tracking technologies to collect data about your behavior on our site and interactions with our ads.

---

4.6 Opting Out of Personalized Advertising

📌 You can opt out of targeted advertising for each platform using the links below:

• Google Ads & Analytics: https://www.google.com/settings/ads/anonymous
• Facebook & Instagram Ads (Meta): https://www.facebook.com/settings/?tab=ads
• TikTok Ads Tracking: https://www.tiktok.com/legal/privacy-policy (scroll to "Your Choices")
• Pinterest Ads: https://help.pinterest.com/en/article/personalized-ads-on-pinterest
• Microsoft Bing Ads: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

📌 You can also opt out of multiple tracking services at once via:

• Digital Advertising Alliance: https://optout.aboutads.info/
• Network Advertising Initiative (NAI): https://www.networkadvertising.org/choices/

---

4.7 Data Collected for Advertising & Tracking

These advertising platforms may collect the following information based on your consent:

• Pages you visit on our site
• Products you view or add to cart
• Purchase activity
• Ad interactions and clicks
• IP address, browser type, and device information

📌 You can manage or withdraw your cookie consent at any time in your browser settings or via our website's cookie preferences.

4.8 Review Requests & Customer Feedback (Trustpilot & Reviews.io)

We value customer feedback and may request reviews from customers who have made a purchase from Skylit Studio. To ensure authentic and verified reviews, we collaborate with Trustpilot and Reviews.io to collect and display customer feedback.

How We Use Review Platforms for Review Collection

✅ After making a purchase, you may receive an email invitation from Trustpilot or Reviews.io asking you to leave a review about your experience.
✅ This helps us improve our products & services and maintain a high level of customer satisfaction.
✅ Reviews may be publicly displayed on our Trustpilot page, Reviews.io page, and our website.

What Data is Shared with Review Platforms?

To facilitate the review process, we may share limited customer information with Trustpilot and Reviews.io, including:

📌 Your name (as provided at checkout)
📌 Your email address (for sending the review invitation)
📌 Your order details (to confirm that the review is based on a verified purchase)

These platforms process this data in accordance with their respective Privacy Policies:
- Trustpilot Privacy Policy
- Reviews.io Privacy Policy

Opting Out of Review Requests

If you do not wish to receive review invitations, you can:

📧 Contact us at [email protected] to opt out of review requests.
⚙️ Adjust your preferences directly with Trustpilot or Reviews.io using the unsubscribe link in the review invitation email.

By sharing feedback, you help other customers make informed decisions while allowing us to continuously improve our offerings.

---

5. Legal Basis for Processing (GDPR Compliance)

If you are a resident of the EEA (European Economic Area), we process your data based on:
✔️ Your consent
✔️ The performance of a contract (e.g., fulfilling orders)
✔️ Legal obligations (e.g., tax regulations)
✔️ Legitimate business interests (e.g., fraud prevention, website improvement, advertising measurement)

🌍 International Data Transfers

Some of our service providers, including Shopify and its Enhanced Services, Google, and Meta, may transfer and store your personal data outside the UK or European Economic Area (EEA), including in Canada and the United States.

Enhanced Services Data Processing: When you interact with our store, your data may be processed by Shopify's Enhanced Services, Google's Enhanced Conversions, and Meta's Enhanced Matching, which involves processing your information alongside data from other merchants. This processing may occur in various countries where these platforms and their partners operate.

Where applicable, these transfers are made under legally approved mechanisms such as Standard Contractual Clauses or adequacy decisions in accordance with the UK GDPR.

You can learn more by visiting Shopify's GDPR Whitepaper.

---

6. Data Retention & Security

We retain Personal Information only as long as necessary for order fulfillment, legal compliance, and security.

• Order Data: Retained indefinitely for accounting and legal purposes unless requested for deletion.
• Marketing Data: Retained until you unsubscribe or withdraw consent.
• Support Correspondence: Retained for 12–24 months depending on context.
• Enhanced Conversion Data: Retained by Google and Meta in accordance with their data retention policies (typically 90-180 days for hashed conversion data).

---

7. Your Rights (GDPR, CCPA & US State Privacy Laws Compliance)

🔹 For EEA Residents (GDPR)
You have the right to:

• Access your Personal Information
• Request corrections or updates
• Request deletion ("right to be forgotten")
• Restrict processing
• Data portability (transfer to another provider)
• Withdraw consent for Enhanced Services and cross-merchant advertising
• Object to processing based on legitimate interests (including ad measurement)

🔹 For UK/EEA/Switzerland Customers (Enhanced Services)
You have additional rights regarding Enhanced Services:

• Withdraw consent for cross-merchant data processing
• Object to targeted advertising based on Enhanced Services
• Access the Shopify Privacy Portal to exercise your rights

🔹 For California Residents (CCPA)
You have the right to:

• Request disclosure of collected data
• Opt out of data sharing for advertising
• Request deletion of your Personal Information

🔹 For US State Residents (Additional Rights)
Under certain US state privacy laws, you may have additional rights:

• Right to opt-out of sharing: You can opt-out of the sharing of your personal data for Enhanced Services and ad measurement
• Right to opt-out of targeted advertising: You can opt-out of targeted advertising based on your cross-merchant activity
• Access our Data Sharing Opt-Out mechanisms through your browser settings or by contacting us

🔹 Submitting a Data Request

To exercise any of your data rights, email us at [email protected] with the subject line "Data Request".
Include your name, email address, and a short description of your request. We may ask for additional verification. We'll respond within 30 days.

Enhanced Services Rights: For rights specific to Shopify's Enhanced Services, you can also visit the Shopify Privacy Portal.

---

8. Cookies & Tracking Technologies

We respect your privacy. You control your data — consent is required for tracking. We only begin tracking after you opt in via our cookie banner.

🔹 What Cookies We Use:

• Essential cookies (for site functionality)
• Performance cookies (for analytics)
• Advertising cookies (for targeted ads)
• Enhanced conversion cookies (for ad measurement)

🔹 Managing Cookies:
You can disable cookies in your browser settings or opt out via AllAboutCookies.

🔹 Shopify Cookies Policy:
Since our store is powered by Shopify, some cookies are set and managed by Shopify to ensure secure checkout, user authentication, and site performance.

For a full list of cookies Shopify sets on storefronts, see Shopify's Cookie Policy.

🔹Star Map Design Cookies:

Our star map creation tool uses cookies to save your design progress and preferences, including:
- Location cookies: Store your selected location and coordinates
- Date/time cookies: Remember your chosen date and time settings
- Design preference cookies: Save your selected styles, colors, and customizations

These cookies are essential for the functionality of our star map creator and allow you to return to your design without losing your progress. They may remain active for up to 30 days to facilitate design modifications and reorders.

We review our cookie usage regularly and aim to provide up-to-date information. If you have questions about specific cookies, feel free to contact us at [email protected].

8.1 Specific Cookies We Use

We value transparency about the cookies used on our website. Below is a comprehensive list of cookies that may be set when you visit our site:

 

For any questions about specific cookies or to request more information about our tracking technologies, please contact us at [email protected].

---

9. Do Not Track (DNT) Requests

We currently do not respond to "Do Not Track" signals, as there is no industry standard for compliance.

---

10. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date.

---

11. Will my order be filmed or photographed?

Your order may be filmed/photographed for our social media accounts and/or for use on our website unless we are told in advance that you would like the order to be kept private.

---

12. Complaints & Contact Information

If you believe we have mishandled your Personal Information, please contact us at [email protected].

For Enhanced Services related concerns: You can also contact Shopify directly through their Privacy Portal.

If you are unsatisfied with our response, you may file a complaint with your local data protection authority:

• UK ICO: https://ico.org.uk/make-a-complaint/
• EU DPA Contacts: https://edpb.europa.eu/about-edpb/board/members_en

 

📅 Last Updated: 28/12/2025