Privacy Policy
Last updated: September 19, 2026 · How NXSTUDIO collects, secures, and handles customer data across our global storefront.
We do not sell, rent, or trade your personal data. Customer information is gathered solely to fulfill collectible orders, process payments securely, and deliver high-precision support.
Information We Collect
When you browse our catalog or make a purchase on NXSTUDIO (nxstudio.com), we collect specific transaction and device parameters:
Order & Billing Records
Full name, billing and recipient shipping address, contact phone number, email, and detailed item SKU orders.
Encrypted Tokenization
Payment card numbers are processed directly via PCI-DSS Level 1 compliant gateways (Stripe, Airwallex). We never store raw card numbers on our servers.
Telemetry & Device Info
IP address, browser type, regional location, and referral headers collected to optimize edge routing and prevent fraudulent transactions.
Purpose of Processing
Order Fulfillment & Dispatch
Sharing recipient coordinates with courier logistics partners (DHL, FedEx, SF Express) for physical delivery and tracking updates.
Fraud Prevention & Payment Security
Real-time screening against chargeback abuse, card testing, and identity discrepancies via automated payment risk scoring.
Transactional Communications
Dispatching automated order receipts, invoice PDF generation, delivery notifications, and customer support ticket handling.
Third-Party Data Sub-Processors
| Partner | Function | Privacy Framework |
|---|---|---|
| Stripe & Airwallex | Payment Gateway | PCI-DSS Level 1 Certified, SOC 2 compliant encrypted token processing. |
| DHL, FedEx, SF Express | Logistics & Courier | International commercial airway bill generation and customs clearance. |
| Cloudflare Edge Network | CDN & DDoS Shield | Global TLS caching, bot prevention, and web application firewall security. |
Your Data Protection Rights
Depending on your jurisdiction (including the European Economic Area, UK, and California), you possess clear statutory privacy protections:
Data Portability
Request an export of all personal information and purchase history stored in your customer account.
Account Modification
Update or correct billing and shipping addresses at any time via your Member Console.
Account Deletion
Request complete anonymization or deletion of your profile, subject to statutory tax and financial record retention laws.
Privacy Inquiries & Data Requests
How long we keep your data
Order and billing records are kept for as long as tax and accounting rules require, which in most jurisdictions means seven years from the end of the financial year of the sale. Keeping them is not optional for us: an order record is the legal evidence that a cross-border sale happened and that the correct duty treatment was applied.
Everything else is kept only while it has a purpose. Support tickets and email threads are retained for two years after the last reply, which covers the realistic window for a warranty or transit-damage claim. Analytics data is aggregated and IP-anonymised with a retention of up to two years. Marketing email consent, where you have given it, lasts until you unsubscribe, and the unsubscribe record is kept afterwards so we can prove you were removed.
International data transfers
NXSTUDIO sells worldwide, so an order placed in one country is routinely processed on infrastructure in another. Two transfers matter in practice. Payment authorisation data goes to the payment gateway that processes the transaction, which operates under PCI-DSS Level 1 controls and its own regional data centres. Analytics data is processed by the analytics provider, which may store it outside your country.
Where personal data leaves the region it was collected in, the transfer relies on the processor's own contractual safeguards rather than on any onward transfer by us — we do not pass customer data to any party that is not needed to complete the order or run the store.
If you stop shopping here
Closing your account removes your login, saved addresses and wishlist. It does not automatically erase order records, because those must be kept for the statutory period described above; it does stop any further processing for marketing or analytics purposes connected to you. If you want an order record erased too, say so in the request — where no legal retention duty still applies to it, we will delete it and confirm in writing.
Requests are made through the member console above or by email to [email protected]. We verify identity before acting on a request, which is why we ask for the order identifier or the email address the account was created with.