Privacy Policy

1. Who We Are

VaSTAR STUDIO is a card design studio serving brands, clubs and IP teams worldwide. We work on sports cards, collectible cards and tarot decks, from supplied artwork or an original concept through sampling and production coordination.

For the purposes of the EU/UK General Data Protection Regulation (GDPR), the data controller is WeiZhiXingYu (Dongguan) International Trade Co., Ltd. This policy applies to personal data collected through our website at vastarstudio.com and related communications.

2. Information We Collect

We collect only what we need to respond to your inquiries and operate this site:

• Inquiry data: name, company/brand, email address, estimated quantity, product type and project details that you submit through our contact form or send to us by email or WhatsApp.
• Communication data: the content of messages you send us and basic metadata (such as the channel used).
• Usage & device data: anonymous, aggregated statistics about how visitors use the site (pages viewed, approximate region, device type) — only where you have consented to analytics cookies.
• Marketing data: attribution information that tells us which channel (for example Instagram or Google) led you to the site — only where you have consented to marketing cookies.

We do not collect special categories of personal data (such as health, religion or political opinions), and we do not knowingly collect data from children.

3. How We Use Your Information

• To reply to your quote requests and project inquiries, and to prepare and send samples.
• To manage the production, shipping and after-sales support of orders you place with us.
• To improve our website and the relevance of our content (analytics, with consent).
• To measure the performance of our marketing channels and ads (marketing, with consent).
• To comply with legal obligations and protect our legal rights.

We never sell your personal data. We use your inquiry data only for the purpose you provided it.

4. Cookies & Similar Technologies

We use a small number of cookies. You choose which non-essential categories we may use via the banner when you first visit, and you can change your choice at any time through Cookie Settings in the footer.

• Essential: required for the site to function — for example, remembering your language choice and form state. These are always active and cannot be switched off.
• Analytics: anonymous usage statistics (such as Google Analytics) that help us understand and improve the site. Loaded only with your consent.
• Marketing: measurement of advertising performance from channels such as Instagram and Google (such as the Meta Pixel). Loaded only with your consent.

We do not load analytics or marketing scripts until you have opted in — this is the default, and "Reject Non-Essential" keeps only what is required.

5. Legal Basis for Processing

Where the GDPR applies, we rely on the following legal bases:

• Contract: processing needed to respond to your inquiry and to fulfil an order (Art. 6(1)(b)).
• Legitimate interests: operating and improving our website and defending our business, balanced against your rights (Art. 6(1)(f)).
• Consent: analytics and marketing cookies, and any other purpose for which we specifically ask for your permission (Art. 6(1)(a)). You may withdraw consent at any time.
• Legal obligation: where we must retain or disclose records to comply with law (Art. 6(1)(c)).

6. Sharing & International Transfers

We share personal data only with vetted service providers who help us operate — for example email and messaging platforms, and (with your consent) analytics and advertising providers. Each is bound by contractual confidentiality and data-protection obligations.

Because our operations are based in China, your data may be transferred to and processed in the People's Republic of China. Where we transfer personal data out of the EEA or UK, we put in place appropriate safeguards (such as standard contractual clauses) to protect it.

7. Data Retention

We keep inquiry and order data only as long as necessary for the purpose it was collected, including any legal, accounting or reporting requirements. In practice, inactive inquiry records are reviewed and deleted on a rolling basis, and we retain core order records for the period required by applicable tax and commercial law.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us using the details in section 9. We respond within the timeframe required by law (generally one month under the GDPR).

9. Contact Us

Data-protection inquiries and requests can be sent to:

• Email: virgilqian@vastar.email
• Post: WeiZhiXingYu (Dongguan) International Trade Co., Ltd., Guangdong, China
• WhatsApp: +86 190 4706 8889

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date below shows when it was revised, and we will post the current version on this page.