Privacy policy

Who is responsible

Iveta S., trading as Imagonarium, Riga, Latvia, is the controller of the personal data described here. Write to support@imagonarium.com about anything on this page.

What is collected, and when

While you browse, we measure visits with Google Analytics, and how our own ads perform with Google Ads — each only if you allow it (see Cookies): which pages are seen, where visitors come from, whether they came from one of our ads, and what is added to the cart and bought — never your name or email. Our hosting provider keeps short-lived technical logs (such as IP addresses) to run and protect the site. The country your connection comes from is used, at the moment you visit and without being stored, to show prices in your currency as a guide. We also count how many people look at each listing and article, without cookies: your address and browser are turned, with the day’s date and a secret, into a one-way code that can’t be traced back to you and changes every day, so nobody is followed from one day to the next. If you open the shop by scanning one of our printed QR codes, we count that scan the same way, with the time, the kind of device and the city your connection comes from (not your address); your browser then remembers which code it was for 30 days, in its own storage like the cart, and if you buy in that time your order notes it.

When you design a moon calendar, the place you search for is sent to Moon Poster Studio (our own service that draws the calendars) and to OpenStreetMap to find its coordinates and time zone. Your design is kept with your order so your file can be drawn and re-downloaded.

When you buy, your name, email address, billing country and payment details are collected by Lemon Squeezy, our reseller and merchant of record, on its checkout. We receive your name, email address, what you bought and the amount paid, so we can deliver your files and help you with your order. We also record each download of your files (the time and the country it came from), so a download link that has been shared publicly can be spotted.

A week after you buy, we send one email to the address you bought with, asking how your purchase turned out and linking to a page where you can review it. It is the only email about the order, and it isn’t sent if you have already written a review. If you write one, your rating, your words, any photos you add, the name you choose to show and the date are published on the listing. Photos are redrawn in your browser before they are sent, which removes the location and camera details phones store in them.

If you send something as a gift, we keep the recipient’s name and email address, your name, your message, the occasion and the delivery day with the order, and use them only to email the gift on that day and show it on the recipient’s gift page. The gift email shows your name and message, and replies to it go to the address you paid with. The recipient is not added to any list. Please only send gifts to people who would expect to hear from you.

If you sign up for our emails — in the footer, on an article or the download page, or by ticking the box in the cart — we keep your email address, where you signed up and when. Signing up on the site adds you at once and sends a short welcome email, with a link to unsubscribe if it wasn’t you. Ticking the box in the cart adds the address you pay with once your payment goes through. We then send new designs and offers, about once a month. Every email has a link to unsubscribe, which works at once; we keep the address marked as unsubscribed so it isn’t added back by mistake. The legal basis is your consent.

When you write to us through the contact form we keep your name, email address, your message, any order number you give, and a one-way code made from your network address and email, used only to limit how many messages can be sent in an hour.

Who it is shared with

• Lemon Squeezy — takes payments, charges tax and issues receipts as merchant of record. It is a controller of your payment and billing data in its own right, under its own privacy policy.
• Cloudflare — hosts the site and stores the shop’s files and records.
• Resend — sends our emails, such as replies to your messages and the newsletter.
• Zoho Mail — hosts our support mailbox, where your messages and our replies are kept.
• Google (Google Analytics and Google Ads) — measures visits and our ads, each only if you allow it. IP addresses are shortened. With advertising allowed, Google may use what it learns here to show you our ads elsewhere; without it, Google receives no advertising cookies or identifiers from this site.
• Moon Poster Studio (run by us) and OpenStreetMap — for moon calendars, as described above.

Some of these providers may process data outside the EU; where they do, they rely on the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses. Nothing is sold, and nothing is shared for advertising.

How long it is kept

Order records are kept for as long as tax and accounting law requires — in Latvia, up to 10 years. Contact messages are kept while we need them to help you, and deleted within two years. Newsletter addresses are kept while you are subscribed; ask us and we delete yours entirely. A design you save for later, with the email address you give for its link, is kept for 60 days after your last change — we email reminders after 3 and 14 days and a last notice a week before it goes — and deleted then, or as soon as you buy it, or straight away from the link in any of those emails. The address is used for nothing else. Your download page stays open for 30 days after you buy (for a gift, 30 days from its delivery day); the files drawn for you are then deleted. Write to us and we open it again.

Your rights

You may ask for a copy of the personal data we hold about you, ask for it to be corrected or deleted, object to how it is used, or ask for it in a portable form. Write to us and expect an answer within a month. We cannot delete order records the law requires us to keep. You may also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv) or to the data protection authority in your own country.

Cookies

The shop itself needs no cookies. Two kinds may be set by Google, each with your permission:

• Google Analytics — to count visits (_ga, _ga_…, kept for up to two years).
• Google Ads — to see which of our ads brought a visit or a sale (_gcl_…, up to 90 days).

In the EU, the UK and Switzerland neither runs until you choose in the notice at the foot of the page (“Analytics only” or “Accept all”); elsewhere they run unless you turn them off here. Your choice is kept in your browser, and you can change it at any time:Google Analytics (visits)allowedTurn offGoogle Ads (our ads)allowedTurn off

Your cart, and the QR code you arrived from if you scanned one, are kept in your browser’s own storage, not in a cookie, and are never sent to us until you check out. Lemon Squeezy sets its own cookies on the checkout, which are needed for the payment to work and to prevent fraud.

Contact

Iveta S., trading as Imagonarium, Riga, Latvia. Email support@imagonarium.com, or use the contact form.