Privacy Policy
Last updated 28 September 2026
This policy covers LLMasters Studio at studio.llmasters.com, the shops it hosts on llmasters.com subdomains, and the checkout that runs on them. The operator is:
LLMasters Studio · orders@llmasters.com
Who we are to you
If you are a seller, you use Studio to run a shop. If you are a buyer, you bought from a shop we host. We are the merchant of record for that purchase, which means your payment contract is with us and we hold the data needed to honour it.
What we collect, and why
Buyers
- Order and delivery details — name, address, email, phone, what you ordered. Needed to take the payment and get the parcel to you. Legal basis: performance of a contract.
- Payment data — handled by Stripe. Card numbers never reach our servers; we store only the payment reference and the amount.
- Marketing identifiers — only if you accepted them on the cookie banner. Without your consent no advertising pixel is loaded at all.
Sellers
- Account details — email, username, shop settings.
- Connected accounts — access tokens for Meta, Google, TikTok and CJdropshipping, stored encrypted.
- Billing records for platform fees and payouts.
Who we share it with
- Stripe — payments, payouts and fraud checks.
- CJdropshipping — the delivery address, so the supplier can ship your order.
- Resend — transactional email (receipts, shipping notices).
- Meta, Google, TikTok — only where a seller has connected them, and for buyers only with consent.
- Hetzner — hosting, in Helsinki, Finland (EU).
We do not sell personal data, and we do not share it for anyone else’s marketing.
Where it goes
Our servers are in the EU. Fulfilling a dropshipped order requires sending the delivery address to a supplier outside the EU, which is a transfer under Chapter V GDPR and happens only to the extent needed to deliver what you ordered.
How long we keep it
Order and invoice records are kept for as long as accounting law requires (seven years in Estonia). Account data is kept while the account is open. Marketing identifiers are dropped when you withdraw consent.
Your rights
Under the GDPR you may request access, correction, erasure, restriction, portability, or object to processing. Write to orders@llmasters.com and we will answer within one month. See also how to delete your data.
You may complain to your national supervisory authority. In Estonia that is the Data Protection Inspectorate (Andmekaitse Inspektsioon).
Cookies
Shops remember your basket and your consent choice in your own browser’s storage; nothing is sent to us until you check out. Advertising and analytics cookies load only after you accept them.