Privacy Policy

MythenCraft is the data controller for personal data described in this policy. Data protection questions can be sent to info@crestia.store. Our data protection representative in [Jurisdiction] is [DPO / Representative Name].

• Enquiry data: name, email address, production or company name, and the content of your message.
• Commission data: body measurements, fitting notes, photographs taken at fittings, and delivery addresses.
• Billing data: invoicing details, purchase orders and payment references processed through our payment provider [Payment Processor].
• Technical data: IP address, browser type and pages viewed, collected through server logs and any analytics provider named in Section 7.

We process personal data to respond to enquiries, prepare quotations, produce and fit commissioned garments, keep pattern and fitting records for repairs and duplicates, issue invoices, and meet accounting and tax obligations in [Jurisdiction].

Depending on the activity we rely on: performance of a contract (delivering a commission); legitimate interests (responding to enquiries, protecting our records and preventing fraud); legal obligation (tax and accounting retention under the laws of [Jurisdiction]); and consent, where required, for marketing communications and non- essential cookies. Consent can be withdrawn at any time.

Body measurements and fitting photographs are treated as confidential. They are stored on access-controlled systems, shared only with the makers assigned to your commission, and never used in marketing without your separate written permission.

Enquiry records are kept for [12] months. Commission records, including patterns and measurement sheets, are kept for [7] years so garments can be repaired, altered or duplicated, unless you ask us to erase them sooner. Financial records are retained for the statutory period required in [Jurisdiction].

We share data only with service providers acting on our instructions: [Hosting Provider], [Email Provider], [Payment Processor], [Analytics Provider] and shipping carriers used to deliver garments. Where data is transferred outside [Jurisdiction], we rely on [Transfer Mechanism, e.g. Standard Contractual Clauses]. We do not sell personal data.

This website uses cookies strictly necessary for its operation. Analytics or preference cookies, where enabled, are set only with your consent and can be managed through your browser settings or the site cookie banner, if displayed.

Subject to the law of [Jurisdiction], you may request access to your personal data, its correction or erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Requests can be sent to info@crestia.store and are answered within [30] days. You may also lodge a complaint with the supervisory authority [Supervisory Authority Name].

We apply access controls, encrypted storage and staff confidentiality undertakings. No system is completely secure; if a breach affects your rights we will notify you and the relevant authority as required by law.

Our services are not directed to children under [16]. Where a costume is commissioned for a minor, we require a parent or guardian to provide the measurements and consent.

We may update this policy; material changes will be posted on this page with a revised date. Questions can be directed to info@crestia.store.