Privacy Policy
Last updated: 2026-09-27
1. Data controller
Leidyi Humans Group LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States, reachable at photo@venatia.com, is the controller of your personal data.
2. Data we collect
When you place an order we collect: name, email address, shipping address and phone number. If you create an account, we also store a hashed password. No card details are stored on our servers — payment is handled entirely by Stripe.
3. Purposes
Your data is used solely to process and track your order, send transactional emails (confirmation, shipping, password reset) and answer your support requests.
4. Legal basis
Processing is necessary for the performance of the sales contract (GDPR Article 6(1)(b) for EU residents) and for our legitimate interest in preventing fraud.
5. Retention
Your data is kept for 3 years after your last order, in line with accounting obligations, then deleted or anonymised.
6. Sharing
Your data is shared with our fulfillment partner (shipping) and with Stripe (payment). These providers act as processors and may only use the data to deliver their service. Data may be transferred outside your country; where required, appropriate safeguards are in place.
7. Your rights
You may request access to, correction, deletion or portability of your data, and object to its processing, by writing to photo@venatia.com. EU residents may also lodge a complaint with their supervisory authority; California residents have the rights granted by the CCPA.
8. Cookies
This site uses no analytics, tracking or advertising cookies. Only technical cookies strictly necessary for the site to work are used: your customer account session if you create one, and the payment session. The audience measurement described in section 9 works without cookies.
9. Audience measurement
We measure traffic on this site to know which pages are read and where visitors come from. The measurement is done by our own servers, with no third-party service. For each page opened we record: the page, the date and time, the site you arrived from, any campaign parameters (utm_source, utm_medium, utm_campaign), a country, the kind of device (phone, tablet, computer) and the time spent on the page. We do not record your IP address, any cookie, or any identifier that would follow you from one visit to the next. Your IP address is used for the duration of the request — to derive a country and compute a visitor code — then discarded without being written down. The country is usually derived from your browser's language: it is an estimate, not a geolocation. The visitor code is an irreversible hash computed with a random key that changes every night and is never kept: the next day it becomes impossible, for us as much as for anyone, to recompute that code or to link two visits together. This data is kept for thirteen months, long enough to compare one season with the previous one, then deleted automatically. It is never sold, shared, or used for advertising.