Privacy policy

Last updated: 09.11.2026. Datenschutzerklärung: the German version is available on request.

Who is responsible

Sofiia Sokolskaia, Kelsenstraße 5, 1030 Vienna, Austria.
Email: paintedmeals.studio@gmail.com

What we collect and why

When you use the sign-up form we collect:

• your first name and email address;
• whether you want to reserve your first letter or only get updates;
• if you reserve: who the letter is for, and the letter theme and recipient's first name if you chose them on the page.

We use this only to confirm your reservation, tell you when pre orders open, and send you news about Painted Meals letters.

If you apply as a creator, we also collect your platform, profile link or handle, follower range, the country we would post to and your note. We use this only to choose who receives our first letters and to write to you about it. If we choose you, we will ask for your postal address by email, and use it only to send the letter.

We do not sell or share your details with anyone for their own purposes.

Legal basis

Your consent (Art. 6(1)(a) GDPR), which you give by ticking the box in the form. You can withdraw it at any time through the unsubscribe link in every email or by writing to us. Withdrawing does not affect anything we did before.

Email service

Our emails and sign-up list are handled by MailerLite (UAB "MailerLite", Vilnius, Lithuania) under a data processing agreement. MailerLite records when you signed up, confirmed your email and opened our emails, so we can prove your consent and keep the list healthy. Details: mailerlite.com/legal/privacy-policy.

Hosting

This website is hosted by [Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA]. When you visit, the host automatically processes technical data such as your IP address, browser and time of visit to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR, our legitimate interest in a secure website). Cloudflare is certified under the EU-U.S. Data Privacy Framework.

No cookies, no tracking

This site does not use cookies, analytics or advertising trackers. Fonts are loaded from our own server, not from Google.

How long we keep your data

Until you unsubscribe or ask us to delete it. If you place an order later, the legally required records are kept for 7 years under Austrian tax law.

Your rights

You can ask us for access to your data, to correct or delete it, to restrict its use, to receive it in a portable format, and you can object to its use. Just email us. You also have the right to complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, www.dsb.gv.at).