Privacy Policy
Last updated: 15 October 2026
This policy explains which personal data we process when you buy or use CardStudio, why, and who we share it with, under Regulation (EU) 2016/679 (GDPR) and other applicable privacy laws.
1. Data controller
The data controller is ROYAL MOTORS S.R.L.S., registered office at Piazza dei Re di Roma 3, 00183 Rome (RM), Italy, VAT and tax code 17263921003, registered with the Rome Companies Register, REA RM-1707035, certified e-mail (PEC) royalmotors2023@legalmail.it. Privacy contact: cardstudious@proton.me. Website: cardstudio.shop.
2. Data we process
- Contact and purchase data: e-mail, name and billing address, country.
- Payment data: handled by Whop (merchant of record). We never see or store your card number; Whop only sends us technical customer and payment-method identifiers, needed to record purchases and to carry out the In-Software Purchases you request.
- Software usage data: the designs you create or buy and technical operating data.
- Browsing and marketing data: identifiers and cookies from measurement pixels (see §5).
3. Why we process it (purposes and legal bases)
- Performing the contract (providing the Software and designs, handling purchases and In-Software Purchases with the card you saved): legal basis performance of a contract.
- Customer support: performance of a contract and legitimate interest.
- Legal obligations (e.g. tax and accounting): legal obligation.
- Measurement and marketing (pixels, ads): consent, where required.
4. Who processes data with us (processors and providers)
- Whop, Inc. — payment processing, saved card, billing (merchant of record).
- Shopify — catalogue and order management.
- Meta and TikTok — ad conversion measurement (see §5).
- Technical hosting and e-mail delivery providers.
Some providers may process data outside the European Union: in that case we rely on appropriate safeguards (e.g. standard contractual clauses).
5. Pixels and measurement
We use the Meta and TikTok pixels to understand which ads lead to purchases. They may process your device identifiers and purchase data. Where required, we only activate them with your consent, which you can manage in the cookie settings. You can also opt out of data sharing for targeted advertising on this page.
6. How long we keep it
We keep data for as long as needed for the purposes above and to meet legal obligations (tax records are normally kept for 10 years). Marketing data is kept for as long as your consent lasts.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw consent at any time. To exercise them, write to cardstudious@proton.me. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of your country. Depending on where you live (for example California and other US states, or Canada), you may have additional rights, including the right to opt out of the “sale” or “sharing” of personal data for targeted advertising, which you can exercise on this page.
8. Payment data and Whop
Because payment is made through Whop, the processing of payment data is also subject to Whop's privacy policy, shown to you at checkout.
9. Changes
We may update this policy; the version in force is the one published on cardstudio.shop.