Privacy policy
Draft pending legal review.
Data controller
SeventyThree Labs S.L. (Crayon Incognito), NIF B25988650, Carrer de Lepant 270, 08013 Barcelona, Spain. Contact: hello@crayonincognito.com.
What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone and delivery address | Handling your order, delivering the print and writing to you about it | Performance of the contract |
| Payment data | Processed by Stripe; we only see the amount and whether it was paid | Performance of the contract |
| Photos of the drawings, the wall and inspiration | Designing your artwork | Performance of the contract |
| Your brief (theme, map place, texts) | Designing your artwork | Performance of the contract |
| Drawing photos after delivery | The studio’s portfolio | Your consent (tick box in the brief) |
| The finished artwork on Instagram and the website | Showing our work, never names or faces | Your consent (tick box in the brief) |
| Your rating and the photo of the print at home | Improving, and showing the photo if you agree | Legitimate interest; consent to show the photo |
| Invoicing data | Tax and accounting obligations | Legal obligation |
| Commission form and gift vouchers | Answering your enquiry; sending the voucher to the buyer | Pre-contractual steps; performance of the contract |
We never ask for children’s names or ages. Please keep full names and faces out of the photos you upload.
How long we keep it
- Photos of the drawings, the wall and inspiration: deleted 60 days after delivery, unless you let us keep them for the portfolio.
- Designs and the final artwork: kept so we can reprint.
- Order and invoicing data: kept for as long as the law requires (generally 6 years for commercial and 4 for tax records).
- Originals sent by post: if you didn’t ask for them back, we destroy them securely after delivery.
Who processes data for us
Service providers acting as processors under GDPR-compliant contracts:
- Stripe (payments)
- Netlify (website hosting)
- Cloudflare (photo storage in the EU)
- Notion (order management)
- Fastmail (email)
- Mapbox (address search for the map theme)
- beehiiv (newsletter, only if you subscribe)
- Our print partner (Printumo or Gelato), which receives the design and your delivery address
Some are outside the European Economic Area (for example in the US). Those transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
Your rights
You can ask for access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to hello@crayonincognito.com. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).