Loading

Privacy Policy

Last updated: 30th July 2026

We keep this short and plain, because a privacy policy nobody can read protects nobody. If anything here is unclear, email us and we will explain it.

1. Who we are

Uriland Studio Ltd. is the data controller responsible for the personal data described in this policy.

  • Uriland Studio Ltd., 09 EL NATHAN, Triq Ix-Xemx U L-Qamar, Fgura FGR 1970, Malta
  • Company registration number: C 116069
  • Email: urilandstudio@gmail.com

We are a small publisher. We do not sell, rent or trade your personal data to anyone, ever, and we do not build advertising profiles from it.

2. What we collect and why

When you place an order

We collect your name, email address, delivery address, and details of what you ordered. We need this to take payment, send you the book, provide receipts, and handle any return or complaint. The legal basis is performance of a contract with you, and legal obligation for the tax and accounting records we are required to keep.

Your card details are entered directly with our payment provider and are processed by them. We never see or store your full card number.

When you subscribe to our newsletter

We collect your email address, and the fact and date of your subscription. We use it to send occasional news about our books. The legal basis is your consent, which you can withdraw at any time using the unsubscribe link in any email, or by writing to us. Withdrawing consent does not affect emails already sent.

When you contact us

We collect your name, email address and whatever you choose to tell us, so that we can reply and keep a record of the conversation. The legal basis is our legitimate interest in responding to enquiries, or performance of a contract where your message concerns an order.

When you simply browse the site

Our website platform records limited technical information such as your IP address, browser type, device type, the pages you visit, and the site you arrived from. This is used to keep the site secure and working, and to understand in aggregate which pages are useful. The legal basis is our legitimate interest in operating and securing the site. Where this involves non-essential cookies, we rely on your consent — see section 6.

3. Who we share it with

We share personal data only with the service providers we need in order to run the shop. Each of them acts on our instructions and is bound to protect your data.

  • Sellfy — the platform hosting this website and processing orders
  • Stripe — payment processing
  • Sellfy — sending our newsletter
  • Various Carriers — delivering your order, which requires your name and address
  • Cloudinary — hosting the images on this site
  • Google Fonts — serving the typeface used on this site, which involves your IP address being sent to Google
  • Our accountant — where invoices and records are required for accounting and tax

We may also disclose data where we are legally required to do so, or where necessary to establish or defend a legal claim.

4. Transfers outside the EU

Some of the providers above are based outside the European Economic Area, or use infrastructure that is. Where personal data is transferred outside the EEA, we rely on the safeguards permitted under the GDPR — an adequacy decision by the European Commission, or the European Commission’s Standard Contractual Clauses. You may ask us for more detail about a specific provider.

5. How long we keep it

  • Order and invoice records: 6 years, as required by Maltese tax and accounting law
  • Newsletter subscription: until you unsubscribe, after which we keep a minimal record of the withdrawal so we do not contact you again by mistake
  • Enquiries and correspondence: 6-12 months from the last message, then deleted
  • Technical and cookie data: as set by our platform and cookie providers, typically no more than 12 months

6. Cookies

Cookies are small files stored on your device. Some are strictly necessary — they keep your shopping basket working, remember your language choice, and keep the checkout secure. These are set without consent because the site cannot function without them.

Any cookies used for analytics or marketing are set only if you agree, and you can change or withdraw that choice at any time through the cookie settings on the site, or by clearing cookies in your browser. Blocking strictly necessary cookies may stop parts of the site from working.

7. Children

Our books are written for children, but this website is intended for adults. We do not knowingly collect personal data from children, and orders should be placed by a parent, guardian or other adult. If you believe a child has given us personal data, contact us and we will delete it promptly.

8. Your rights

Under the GDPR you have the right to:

  • ask for a copy of the personal data we hold about you
  • have inaccurate data corrected
  • have your data deleted, where we have no continuing obligation to keep it
  • ask us to restrict how we use your data, or object to our use of it where we rely on legitimate interests
  • receive your data in a portable format, or have it transferred to another provider
  • withdraw consent at any time, where we rely on consent

To exercise any of these, email urilandstudio@gmail.com. We will respond within one month. There is no charge, and we may ask you to confirm your identity first so that we do not disclose your data to someone else.

9. Security

We take reasonable technical and organisational measures to protect your data, and we limit access to the people who need it. No website or transmission over the internet can be guaranteed completely secure, but if a breach ever occurred that posed a risk to you, we would notify you and the supervisory authority as the law requires.

10. Complaints

If you are unhappy with how we have handled your data, please tell us first — most issues are resolved quickly. You also have the right to complain to the Maltese supervisory authority:

Office of the Information and Data Protection Commissioner (IDPC)
Floor 2, Airways House, High Street, Sliema SLM 1549, Malta
idpc.org.mt

If you live in another EU country, you may complain to your local data protection authority instead.

11. Changes to this policy

We may update this policy as our shop or our providers change. The current version is always the one published on this page, with the date shown at the top. If we make a significant change affecting how we use your data, we will say so clearly on the site.

12. Contact

Uriland Studio Ltd.
09 EL NATHAN, Triq Ix-Xemx U L-Qamar
Fgura FGR 1970, Malta
urilandstudio@gmail.com