Privacy Policy

1. Who We Are

HITART STUDIO OÜ (registry code 16473663, registered at Liimi tn 1b-202, Kristiine linnaosa, Tallinn, Harju maakond, 10621, Estonia), operating under the brand Tiny Little Space, is the data controller for personal data processed through https://tinylittlespace.com.

For any privacy-related question, contact: support@tinylittlespace.com.

2. What Data We Collect

We collect the following categories of personal data:

• Order data: first name, last name, email address, billing country, payment information processed by Stripe.
• Account / delivery data: email address used to deliver workshop access.
• Marketing data: email address and consent status if you opt in to our newsletter.
• Technical data: IP address, device type, browser, pages viewed, referrer, timestamps. Collected via cookies and tracking pixels (see Cookie Policy).
• Support data: any information you share when contacting support@tinylittlespace.com.

We do not store full payment card numbers. All payments are handled directly by Stripe.

3. Why We Process Your Data and Legal Basis

Purpose	Legal basis (GDPR Art. 6)
Process your purchase, deliver the workshop, issue invoices	Contract performance (Art. 6(1)(b))
Provide customer support	Contract performance / legitimate interest (Art. 6(1)(b) / (f))
Send marketing emails (newsletter, related offers)	Consent (Art. 6(1)(a)) — you can opt out anytime
Run analytics (Google Analytics) and advertising (Meta Pixel)	Consent (Art. 6(1)(a)) — collected via the cookie banner
Comply with tax, accounting, and legal obligations	Legal obligation (Art. 6(1)(c))
Prevent fraud and secure the website	Legitimate interest (Art. 6(1)(f))

4. Who We Share Your Data With

We share data only with processors and partners necessary to operate the service:

• Stripe Payments Europe Ltd (payment processing) — EU + USA
• Vercel Inc. (hosting) — USA
• Google LLC (Google Analytics) — USA
• Meta Platforms Inc. (Meta / Facebook Pixel for advertising) — USA
• Email delivery provider (transactional + marketing emails) — EU/USA
• Accountants and tax authorities — Estonia / EU, when legally required

We never sell your personal data.

5. International Transfers

Some of our processors are located in the United States. Transfers outside the European Economic Area are protected by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.

6. How Long We Keep Your Data

• Order and invoicing data: 7 years (Estonian accounting law).
• Marketing data: until you withdraw consent, then deleted within 30 days.
• Analytics data: up to 14 months.
• Support correspondence: up to 3 years after the last interaction.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a structured format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or your local supervisory authority.

To exercise any right, email support@tinylittlespace.com. We will respond within 30 days.

8. Cookies and Tracking

See our Cookie Policy for details on cookies and similar technologies used on this website.

9. Children

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact support@tinylittlespace.com and we will delete it.

10. Security

We use industry-standard measures (HTTPS, encrypted databases, restricted access) to protect your data. However, no system is 100% secure. In case of a data breach affecting your rights, we will notify you and the supervisory authority within 72 hours, as required by law.

11. Changes to This Policy

We may update this Privacy Policy. The "Last updated" date at the top reflects the latest version. Material changes will be communicated by email or a website notice.