Privacy Policy

1 Our Commitment to Your Privacy

LuzyGlassArt (“we”, “us”, “our”) is the trading name of an independent glass artist working in Hanoi, Vietnam. We respect your privacy and collect only the information we genuinely need to craft your artwork, deliver your order, and provide caring support. This policy explains what we collect, how we use it, and the choices and rights you have. The artist trading as LuzyGlassArt is responsible for your personal data (the “controller”) and can be reached at luzyglassart@gmail.com.

2 Information We Collect

When you place an order or contact us, we collect the details you provide: your name, shipping and billing address, email address, phone number (when given), order and message history, and any personalization notes or reference photos you share for custom work. When you browse our site, we also receive limited technical information such as device type, browser, general location, and the pages you view, so we can keep the site working smoothly. If you create a community account, we also hold your email address, username, display name, profile photo and short bio if you add them, a securely hashed password, and the posts, comments, photos and chat messages you send.

3 Payment Information

We never see or store your full card number. Payments on this site are handled by PayPal, a PCI-compliant payment processor that also accepts credit and debit cards without a PayPal account; orders placed through our Etsy shop are handled by Etsy Payments. These processors manage your card or account details directly under their own security standards; we receive only confirmation that payment succeeded and the billing details needed to complete your order.

4 How We Use Your Information & Why We May

We use your information only for the purposes below, each with the legal reason that allows it:

• To take, make, ship and support your order — including order, shipping and delivery emails, custom-commission conversations, and answering your questions. Reason: to perform our contract with you.
• To keep tax and accounting records. Reason: a legal obligation.
• To keep the shop safe — checking payments for fraud, limiting repeated sign-in or form attempts, and fixing problems. Reason: our legitimate interest in a secure shop.
• To ask once, after delivery, for a review of your piece. Reason: our legitimate interest; tell us and we will not ask again.
• To run your community account and the customer chat, and to moderate what is posted. Reason: to provide the service you signed up for, and our legitimate interest in a safe community.
• To send studio news, offers and reminders about an unfinished checkout — only if you opted in. Reason: your consent, which you can withdraw at any time with the unsubscribe link.
• To count visits and see which pages are read — only if you chose “Accept all” in our cookie banner. Reason: your consent.

We do not sell your personal information to anyone, and we do not use it for advertising profiles.

5 Cookies & Similar Storage

We keep a small amount of information in your browser. Some of it is necessary for the shop to work and is always on: your cart and wishlist, your language and currency, your cookie choice, and — if you have a community account — a sign-in cookie. One kind is optional and is set only if you choose “Accept all”: random visit identifiers that let us count visits and see which pages are read. They say nothing about who you are, the longest-lived one stays in your browser for up to 400 days, and they are never shared with advertisers — we use no advertising or social-media trackers. You can change your choice at any time with the “Cookie settings” link at the bottom of every page; if you switch optional cookies off, we stop collecting visit statistics from that moment and remove the visit identifiers from your browser. You can also clear this storage in your browser settings, though the cart will then be emptied.

6 Who Handles Your Data & Where

We share your information only with the services we need to run the shop, and each receives only what its role requires:

• Vercel (USA) hosts this website; our server runs in its Singapore region, and pages are delivered from its worldwide network.
• Supabase (USA) provides our database and photo storage, located in Singapore. Orders, accounts, chat and community content are stored there.
• Resend (USA) sends our emails, such as order confirmations, shipping notices and chat notifications.
• PayPal processes payments made on this site, and Etsy handles orders placed in our Etsy shop. Both act as independent companies under their own privacy policies.
• Etsy’s image servers (USA) deliver many of our product photos, so your browser connects to them and they receive your IP address when you view our pages.
• The shipping carrier and the customs and postal authorities along the route receive your name, address, phone number and the parcel contents, as needed to deliver it and clear customs.
• Photon, run by komoot in Germany, receives only the address characters you type at checkout, through our own server (see “Address Look-Up”).

International transfers. We work from Vietnam, so your data is handled in Vietnam and by the services above in Singapore, the United States and the EU — countries whose laws may protect personal data differently from yours. Each of these services handles it under its own published privacy and data-protection terms, and we never share your details for unrelated marketing.

7 Address Look-Up

When you type a shipping address at checkout, the characters you have typed are sent to our own server, which asks a mapping service (Photon, built on OpenStreetMap data) for matching addresses so we can offer you suggestions. Your browser never contacts that service directly; we send only what you have typed and the country you selected, and nothing that identifies you. Suggestions are optional — every address field can still be filled in by hand.

8 Data Retention

We keep information only as long as we need it:

• Orders (including name, address, email, phone and personalization text): 10 years from the order date, to meet tax and accounting requirements. If you ask us to erase your data sooner, we remove your name, email, phone and street address from the order and keep only what the accounts need — the country and region, the items and the amounts.
• A checkout you started but did not pay for: our record of the payment you began, including the address sent to PayPal, is deleted after 14 days. The email address and basket you entered are kept until you complete your order or ask us to delete them. A reminder is only ever sent within 14 days, and only if you agreed to emails.
• Studio news and offers: until you unsubscribe. After that we keep only your email address on a do-not-email list, so that we never write to you again.
• Community account, posts, comments, photos and chat messages: for as long as you keep your account. If you ask us to delete it, we delete your posts, photos and chat; where other members have replied to a post of yours, the thread stays but your words are removed and your name no longer appears.
• Visit statistics (only with your consent): the visitor ID in your browser lasts up to 400 days, and the visit records on our server are deleted after about 26 months.
• Our record of the emails we sent you (address, subject and date): for the same period as order records; if you ask us to erase your data, your address is removed from it.

9 Your Privacy Rights

Depending on where you live (including under the EU/UK GDPR and California’s CCPA), you may have the right to access the personal data we hold about you, correct inaccurate information, request deletion, object to or restrict certain processing, request a portable copy of your data, and opt out of marketing at any time. We will never discriminate against you for exercising these rights. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before you withdrew it.

10 How to Exercise Your Rights

To make any privacy request, email us at luzyglassart@gmail.com describing what you would like. We may ask a question or two to verify your identity, and we aim to respond within 30 days. You can also unsubscribe from marketing emails instantly using the link at the bottom of any message.

11 If You Are Not Happy

We would like the chance to put things right, so please write to us first at luzyglassart@gmail.com. But you do not have to: if you live in the EU or EEA, you can complain to the data protection authority in the country where you live or work, and in the UK to the Information Commissioner’s Office (ico.org.uk). If you live elsewhere, you can also contact the data protection authority where you live.

12 Users in Vietnam

If you live in Vietnam, the Law on Personal Data Protection (No. 91/2025/QH15) and Decree 356/2025/ND-CP also apply to how we handle your data.

• Your rights: to be told how your data is used, to see, correct or delete it, to withdraw your consent, and to restrict or object to its use.
• Our response times: we confirm that we have received your request within 2 working days; we let you see or correct your data within 10 days; we act on a withdrawal of consent, a restriction or an objection within 15 days; and we delete your data within 20 days.
• Sensitive data: Decree 356/2025/ND-CP treats some data as sensitive, including records of how you behave on an online service and bank account or card details. We do not store your card number — PayPal takes the payment and keeps it. We do keep your order history and the pages you look at while shopping, we use them only to run the shop and to show you the right things, and you can ask us to delete them using the rights above.
• Complaints: you can complain to the specialised personal data protection authority of the Ministry of Public Security (Bộ Công an).

13 Children’s Privacy

Our store is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us their information, please contact us and we will promptly delete it.

14 Security

Your connection to our site is encrypted (HTTPS), and we limit access to personal data to the people who need it to serve you. While no online service can guarantee absolute security, we take reasonable measures to keep your information safe.

15 Contact & Updates

Questions or privacy requests? Email luzyglassart@gmail.com or call +84 98 579 6137 during Monday–Friday, 9:00 AM–5:00 PM ICT. We may update this Privacy Policy from time to time; the “last updated” date below reflects the current version.