Privacy Notice

Last updated: June 10, 2026

This Privacy Notice explains how 227Studios ("we", "us", "our") collects, uses, and protects personal data when you use our website, services, and products (the "Service"). 227Studios acts as the data controller for personal data processed through the Service.

1. Personal data we collect

• Account data: name, email, login credentials, profile information.
• Communications: support messages, feedback, survey responses.
• Usage and device data: pages viewed, actions taken, IP address, browser, device identifiers, telemetry.
• Order data: products and services purchased, booking details, wallet balance and history.
• User content: files, images, text, and other material you upload to the Service.

Payment information (card details, billing address, tax IDs) is collected directly by our payment processor, Stripe, and is not stored by us. See "Payment processing" below.

2. Why we use your data and legal basis

• To provide the Service — account creation, authentication, fulfilment of orders, bookings, wallet operations. Legal basis: performance of a contract.
• Security and fraud prevention — detecting abuse, protecting users and the platform. Legal basis: legitimate interests.
• Customer support — responding to your questions and complaints. Legal basis: performance of a contract / legitimate interests.
• Product improvement and analytics — understanding how the Service is used. Legal basis: legitimate interests.
• Marketing — only where you have opted in. Legal basis: consent.
• Legal compliance — tax, accounting, responding to lawful requests. Legal basis: legal obligation.

3. Payment processing (Stripe)

Payments are processed securely by Stripe. Stripe handles card processing, fraud prevention, and PCI-compliant storage of payment instruments. Personal data you submit at checkout is processed by Stripe under its own Privacy Policy.

4. Sharing your data

We share personal data only with:

• Service providers / subprocessors — hosting, database, email delivery, analytics, error monitoring, and customer support tooling.
• Stripe — for payment processing, fraud prevention, subscription management, and invoicing.
• Professional advisers — legal, accounting, and audit professionals where required.
• Authorities — where required by law or to protect our rights.

We do not sell your personal data.

5. Data retention

We keep personal data only as long as needed for the purposes listed above, to comply with legal obligations (e.g. tax retention periods), or to resolve disputes. When data is no longer needed it is deleted or anonymised.

6. Your rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise these rights, contact us at the address below; we aim to respond within one month.

7. International transfers

Where personal data is transferred outside your jurisdiction (including outside the UK/EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege practices. No system is perfectly secure, so we cannot guarantee absolute security.

9. Cookies

We use cookies and similar technologies for essential functionality (authentication, session state), and where enabled, for analytics. You can manage cookies through your browser settings.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

11. Contact

227Studios — for privacy questions or to exercise your rights, contact us through the support channels in your account.