Privacy Notice

Who controls your data

Data controller: ECOARTSSTUDIO LTD, company number 16595665, trading as Princess Aria. Registered office and correspondence address: 18 London Mews, London, England, W2 1HY. Contact: princessaria10@icloud.com.

The website is currently open for browsing, account access and enquiries. Purchases and customer access to private originals are disabled during pre-launch. Payment and age-assurance processing will not start until the services have been approved, configured and tested.

Information we use

• Account information, including email address, account identifier and authentication records.
• Enquiry information, including name, contact details, preferences and the message you send.
• Order information, including products, price, payment status, provider references and access dates. Full card details are handled by the payment provider and are not intended to be stored by this site.
• Age-assurance status and provider reference. The service is designed to receive a result, not copies of identity documents or raw biometric data.
• Technical and security records such as request data, device/browser information, audit records and access logs where needed to protect the service.

Why we use it

• To create and secure accounts and provide purchased content under our contract with you.
• To answer enquiries and provide customer support.
• To meet age-assurance, accounting, fraud-prevention and other legal obligations.
• To protect private media, investigate misuse and maintain service security where our legitimate interests do not override your rights.
• For optional marketing or non-essential tracking only where valid consent has been obtained.

Providers and international processing

Cloudflare provides hosting and protected storage, and Supabase provides account authentication and authentication-email delivery through its configured sender. Yoti and CCBill are proposed age-assurance and payment providers and are not active for customer purchases in this review release. Provider privacy notices, processing locations, transfer safeguards and the final order-email service will be confirmed before sales open.

Retention and security

We review enquiry information for deletion within 24 months and security/audit records within 12 months, unless a dispute, legal obligation or security investigation requires longer retention. You may request account closure by email. Necessary accounting and transaction records will be kept for applicable statutory periods when sales open; the final retention schedule will be confirmed before then.

Private originals are held in non-public storage. Access is intended to require authentication, age verification and an active entitlement. No internet service can promise absolute security.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Email princessaria10@icloud.com to make a request. You may also complain to the UK Information Commissioner’s Office.