Ashtray Studio is committed to protecting your privacy and keeping your personal information safe. This Privacy Policy explains how we collect, use, and safeguard your data when you interact with our website, services, or team. We comply with the General Data Protection Regulation (GDPR) and other applicable laws to ensure your data is handled responsibly.
The controller of your personal data is SIA Ashtray, trading as Ashtray Studio, registration number 40203486859, VAT number LV40203486859, based in Riga, Latvia.
Registered office: SIA Ashtray, Dārza iela 46-19, Liepāja, LV-3401, Latvia. For any question about this policy or your personal data, contact ralfs@ashtraystudio.eu. We have not appointed a data protection officer, as we are not required to.
This Privacy Policy applies to personal data collected through our website ashtraystudio.eu, orders placed with Ashtray Studio, and email or other communication with our team. It does not cover employee or contractor data in the context of work relationships.
Depending on how you interact with us, we may collect personal identifiers (name, email, phone, billing and shipping address, company name); communications (messages and emails with our team); and technical request data (IP address, browser type, pages visited) processed by our host. If you accept analytics cookies, Google Analytics also collects usage data about your visit, as described in clause 9.0.
We may use your personal data to process and deliver your orders, provide customer support, communicate updates, offers, and relevant information (if you opt in), improve our website, products, and services, and comply with legal obligations. We will not sell your personal information to third parties.
We state the lawful basis for each purpose separately.
Where we rely on your consent you may withdraw it at any time. For Google Analytics, open the cookie settings from COOKIES at the bottom of the home page.
We share your data only with the service providers who process it on our behalf, and with authorities where the law requires it.
This website loads Cloudflare's analytics beacon from elsewhere, and Google Analytics only if you accept it; both are described in clause 9.0. Our recipients are:
Cloudflare hosts this website and processes technical request data such as your IP address in order to serve pages and protect the site. Tally hosts the Stitch Lab enquiry form on its own website, which you reach by following a link from ours; anything you enter there is submitted to Tally and passed to us. Our manufacturing partners receive only the specification and delivery details needed to produce and ship your order. Google Ireland Limited provides Google Analytics as our processor and receives usage data only if you accept analytics cookies. We do not sell personal data, and we run no advertising or cross-site tracking.
We do not transfer your personal data outside the European Economic Area, with one exception that applies only if you accept analytics cookies: Google may then process the usage data collected by Google Analytics in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to provide adequate protection, and Google's data processing terms add the EU standard contractual clauses. If you decline, the only external request this website makes is to Cloudflare's cookieless analytics beacon, served by a processor already named in clause 4.0; it loads no external fonts or advertising scripts, and involves no transfer beyond our existing hosting arrangement.
We keep your personal information only as long as necessary to fulfill the purposes described in this Policy or as required by law. We use appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
Under GDPR, you have the right to access, correct, or delete your personal data; to restrict or object to certain processing; to withdraw consent at any time; and to request data portability.
To exercise any of these rights, email ralfs@ashtraystudio.eu. We will respond within one month. We may ask you to confirm your identity first. Exercising your rights is free unless a request is manifestly unfounded or excessive.
If you think we have handled your personal data improperly, please contact us first at ralfs@ashtraystudio.eu so we can try to resolve it. You also have the right to complain to the Latvian supervisory authority.
We measure traffic in two ways. Cloudflare Web Analytics is cookieless: it stores nothing on your device, does not fingerprint you, and does not follow you to other websites. It reports only aggregate figures, such as how many pages were viewed, which pages, which site you arrived from, and broad country and device type. None of it identifies you.
Google Analytics runs only if you accept it in the cookie banner; if you decline, it does not load at all. Once accepted, it sets two cookies, _ga and _ga_R7BSQ5ZBDX, which last up to 13 months and let Google tell a returning visit from a new one. It records the pages you view, how you arrived, and your approximate location, device and browser. Google Analytics does not log or store IP addresses, and we have switched off Google signals and advertising features, so this data is not used for advertising and is not linked to your Google account.
To remember your choice, the website keeps a small record of it in your browser's local storage for 12 months. That record is strictly necessary and is used for nothing else. You can change your choice at any time: open the cookie settings from COOKIES at the bottom of the home page. Withdrawing consent stops Google Analytics and deletes its cookies. We run no advertising and no cross-site tracking, and there is no chat widget.
This policy was last updated on 14 September 2026. We may update it from time to time. We will post any changes on this page and update the revision history below.