PRIVACY

This describes what Elirion Studio collects, why, and who else sees it. It covers elirionstudio.com and every subdomain. It is written against what the site actually does — if something here stops being true, the policy is wrong and gets corrected.

When you join a list or send an enquiry. Your email address, and whatever you type — a name, a commission brief, a note about a piece, a serial you want to trade. Nothing more; there is no tracking pixel and no profile built alongside it.

When you open a collector account. Your email address and any name you give, held by our authentication provider. We store an internal record linking that account to your holdings.

When you buy something. Your email and shipping address, the items, and the amount. Card details never reach our servers — payment is handled entirely on Stripe’s own hosted checkout, and we receive only the result and the address needed to ship to you.

When you own a piece. Its serial, the date it was bound to you, and the chain of custody before you. This record is append-only: a transfer adds an entry, it never erases the previous holder.

Holding a person’s identity against a serial number is the most sensitive thing we do, so it is worth being exact. The public verification page for a serial shows the piece, its edition, its forge date, and that it is authentic. It does not show who owns it. Ownership is visible to you, in your account.

The chain of custody is retained for the life of the piece, because provenance that can be erased is not provenance and it is part of what a collector is buying. If you close your account we remove your personal details from it and keep the transfer as an anonymous link in the chain.

We use these services and no others. Each holds only what its job requires:

Stripe — payments and checkout. Holds card details, which we never see, plus your email and shipping address.
Clerk — collector accounts and sign-in.
Neon — the database holding orders and the ownership registry.
Vercel — hosting, and the private storage where enquiries and list signups are kept.
Resend — sending email, once email is switched on.

We do not sell your data, and we do not share it for anyone else’s advertising.

Joining a list is a request to be told about one thing. We will use it for that and for drop announcements — nothing else — and every message carries a one-click unsubscribe that works immediately and without a reply.

Transactional email is separate: an order confirmation or a dispatch notice is part of the sale, so it is sent whether or not you take marketing.

List signups until you unsubscribe. Enquiries for two years. Orders for seven years, because tax law requires it. Ownership records for the life of the piece, as above.

Ask and we will tell you what we hold, correct it, export it, or delete it. If you are in the UK, EU, California, or another place with its own rules, those rights apply to you here regardless of where we are. Write to support@elirionstudio.com and expect an answer within 30 days.

Two honest limits. We cannot delete what tax law requires us to keep, and we cannot erase a completed transfer from a provenance chain without destroying the record that gives every other holder their proof — we will anonymise your part of it instead.

Artwork and personal records are held in private storage that refuses unauthenticated reads. Access to the studio requires a signed session and is rate limited. We do not claim to be unbreakable; we claim to have thought about it and to fix what we find.

This is not for under-16s and we do not knowingly collect their data.

The date at the top moves when this does. A change that affects how we use what we already hold gets an email first, not a quiet edit.

Questions → support@elirionstudio.com