Privacy Notice
Last updated: 31 October 2026
Draft notice: the owner's legal identity, verified contact details, provider agreements and retention policies still require confirmation before launch.
1. Who is responsible
SHO Studio operates this website. The legal entity name, registered address and verified privacy contact must still be supplied by the owner. This is an operational draft awaiting those details and legal review.
2. Accounts and your designs
If you create an account, Lovable Cloud stores your account identifier, email, sign-in provider information, optional display name, saved designs and pictures you choose to save. Account and design processing provides the service you request; the intended legal basis is performance of that service contract. Sign-in credentials are managed by the authentication service, not stored in your profile. Your studio designs are private to your account. Please do not upload sensitive information or another person's personal data without permission.
3. Optional analytics
Only after you opt in, PostHog receives page categories, selected interaction events and active time on pages, with a random browsing-session identifier held in memory. We do not send your account email, display name, design text or pictures to analytics. Automatic click collection and session replay are disabled. The legal basis for optional analytics is consent; change your choice through Cookie preferences. Withdrawal stops future collection; it does not automatically erase already collected events. PostHog uses its EU ingestion endpoint, but the owner must review processing locations, subprocessors, retention and transfer safeguards before launch.
4. Marketing choices
Special offers, collections and studio news by email require your separate optional consent in My Studio. We record your choice, the notice version, consent wording and server timestamp. You may withdraw consent at any time in My Studio, without affecting your account or designs. No promotional mailing service is currently connected. Any future campaign must honour your latest choice and include an unsubscribe link; consent here does not enable targeted advertising or sharing audiences with advertising platforms.
5. Shopping and service providers
Shopify separately handles products, carts, checkout, payment and order records; your studio account does not replace a Shopify customer account. Lovable Cloud provides account, design and private-image storage. PostHog provides optional analytics. Sign-in providers process their own sign-in activity. The owner must complete processor agreements, recipient disclosures and any required international-transfer safeguards. No additional Meta Pixel is installed by this account feature.
6. Retention and deletion
Studio profiles and saved designs remain until you delete them or your studio account. Delete a saved design to remove its associated stored pictures. Account deletion removes studio account records, designs, consent history and uploaded files, not Shopify orders subject to separate obligations. The owner must approve and publish specific inactivity, analytics, consent-evidence and backup retention periods; deletion from backups follows the provider's verified retention arrangements.
7. Your rights
You can edit your display name, download your account/design data, delete saved designs or your studio account, and withdraw marketing and cookie consent in My Studio. Depending on the circumstances, you may request access, rectification, erasure, restriction, portability or object to processing. For any remaining request, use the owner's verified privacy contact once supplied. You may complain to Sweden's supervisory authority, Integritetsskyddsmyndigheten (IMY), at imy.se. An appropriate response must normally be provided within one month, subject to GDPR exceptions.
8. No automated decisions
This feature does not make decisions with legal or similarly significant effects about you. Optional analytics is used for website improvements, not account-level advertising profiles. If processing purposes change, this notice and any required consent must be updated.