Privacy Policy
Effective date: [SET DATE]
This Policy describes how Framed Story (“we”) processes personal data of users of framedstory.by. Processing is carried out in accordance with the Law of the Republic of Belarus No. 99-Z of 7 May 2021 “On Personal Data Protection”.
1. Operator
The data operator is [УКАЗАТЬ: ООО «Фрэймд Стори», УНП, адрес]. For data-related questions, contact [email protected].
2. Data we collect
Account. Name and email at registration. With Google sign-in we receive your name and email; we never receive or store your Google password.
Order data. Delivery address or pickup point, contact phone, and order contents (layout, sizes, image selections).
Payment data. Payments are handled by bePaid. Card details are entered on the provider’s side; we never see or store card number, CVV, or bank details — only a transaction ID and status.
Uploaded images. Stored in secure cloud storage (Cloudflare R2) and used solely to produce your order.
Waitlist data. During pre-launch we may collect your email to notify you when sales open.
Technical & cookies. IP address, browser/device type, referrer, pages viewed; localStorage to keep your session; analytics cookies, which you can opt out of (Section 7).
3. Purposes & legal basis
We process data to create and manage your account, fulfil and deliver orders, send service emails, provide support, notify waitlist members of launch, prevent fraud, improve the service, and meet legal obligations. Processing is based on your consent (Art. 5 of Law No. 99-Z) and on performance of the contract. We do not sell your data or use it for behavioural advertising without consent.
4. Sharing & cross-border transfer
We share data only as needed to deliver the service:
- bePaid — payment processing;
- Google — authentication for Google sign-in;
- Cloudflare — storage and delivery of uploaded images;
- Resend — transactional email delivery;
- Google Cloud Vision — automatic image analysis for art matching;
- Google Analytics, Yandex.Metrica, Meta, Pinterest — analytics and ad measurement; you can opt out at any time.
Some providers process data on servers outside Belarus. By providing your data you consent to such cross-border transfer to the extent needed to deliver the service.
5. Retention
Account and order data are kept while your account is active and for a reasonable period afterward to meet accounting and tax obligations. Uploaded images are kept until your order is fulfilled and for a further 90 days, then deleted.
6. Your rights
Under Law No. 99-Z you may request information about processing, ask us to correct your data, withdraw consent and require processing to stop, request deletion (subject to mandatory retention), and appeal to the National Center for Personal Data Protection. Email [email protected]; we respond within the period set by law (typically 15 days).
7. Cookies & analytics
We use Google Analytics, Yandex.Metrica, Meta, and Pinterest for analytics and ad measurement. These run when you visit the site; the cookie banner notifies you of their use. Opt out at any time via .
8. Children & changes
The service is not directed at anyone under 18, and we do not knowingly collect their data. We may update this Policy; material changes will be announced by email or a notice on the site.