Privacy policy

Last updated: 23 May 2026

Who we are

Tinyframe Co. (“we”) is a small business based in Italy and is the data controller for the personal data you share with us. You can reach us at hello@tiny-frames.com.

What we collect and why

• Order details (name, email, shipping address) to process and ship your order. Legal basis: performance of our contract with you.
• Billing and tax records, kept to meet our legal obligations.
• If you opt in: your email for our newsletter, and analytics or marketing data. Legal basis: your consent, which you can withdraw anytime.

Payments are processed by Stripe. We never see or store your full card details.

Who we share it with

We use trusted providers who process data on our behalf: Stripe (payments), Resend (order emails), Supabase (database), and Vercel (hosting). With your marketing consent we may also share limited event data with Meta for advertising. Some providers may process data outside the EU under appropriate safeguards.

How long we keep it

We keep order and tax records for as long as the law requires, and other data only as long as needed for the purpose it was collected.

Your rights

Under the GDPR you can access, correct, delete, or port your data, and object to or restrict its processing. Email hello@tiny-frames.com and we will help. You also have the right to complain to your local data protection authority (in Italy, the Garante per la protezione dei dati personali).