Privacy notice

Last reviewed: 2026-05-11

This notice explains what personal data this site collects, why, who else sees it, and what you can do about it. The site is small and intentionally light: no analytics, no advertising, no tracking cookies.

1. Who is responsible

Controller: [LEGAL_NAME]
[STREET_ADDRESS]
[POSTAL_CODE_CITY]
[COUNTRY]
Email: [EMAIL]
KvK / Chamber of Commerce: [KVK_NUMBER]
VAT ID: [VAT_ID]

For any privacy question, email the address above. We will respond within 30 days.

2. What we collect, and why

a) Just visiting the site

When you load a page, our hosting provider (TransIP B.V., Netherlands) records standard server logs: your IP address, the URL you requested, the time of the request, your browser identifier (User-Agent), and the referring page.

• Purpose: to keep the site running and detect abuse.
• Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• Retention: TransIP rotates server logs within roughly 30 days.

b) Buying an artwork

When you click "Purchase" on an artwork page, you are redirected to Mollie B.V. (Netherlands). Mollie collects what the payment method requires — typically your name, email address, billing address, and, where shipping collection is enabled, your shipping address. Payment details (card number, bank account) stay with Mollie; we never see or store them.

After a successful payment, Mollie sends us a confirmation email containing your name, email, and shipping address so we can ship the work.

• Purpose: process the sale and ship the artwork.
• Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• Retention: order records are kept for 7 years as required by Dutch tax law (Algemene wet inzake rijksbelastingen, art. 52).

c) Emailing us

If you write to us at the contact address, we receive whatever you put in the email — typically your email address, your name, and the content of your message.

• Purpose: to reply.
• Legal basis: legitimate interest, or pre-contractual measures if the email concerns a possible purchase.
• Retention: up to 3 years, unless the correspondence relates to a sale — in which case the 7-year tax-record retention above applies.

d) Shipping

To ship a purchased artwork we share your name and shipping address with our carrier ([SHIPPING_CARRIER]). The carrier acts as a separate controller for that data and you should consult their own privacy notice for how they handle it.

3. Who else processes your data

We rely on a small number of service providers. None of them sell or share your data for advertising:

• TransIP B.V. — hosting, server logs, daily backups. Netherlands (EU).
• Mollie B.V. — payment processing. Netherlands (EU). See Mollie's privacy notice.
• [EMAIL_PROVIDER] — email inbox. [EMAIL_PROVIDER_LOCATION].
• [SHIPPING_CARRIER] — delivery. [COUNTRY].

We do not sell or rent your data. We share it only with the parties above, and only as needed to operate the site, process your order, and deliver your purchase — or where we are required to by law.

4. International transfers

All processing happens within the EU/EEA. We do not transfer your personal data to countries outside the EU/EEA. (Should that ever change — for example if we add a service hosted elsewhere — this notice will be updated before the transfer starts.)

5. Cookies and tracking

This site sets no cookies of its own. We use no analytics (no Google Analytics, no Plausible, no Matomo), no tracking pixels, no advertising scripts, and no embedded social media widgets. Because of this, we do not show a cookie banner.

Note that Mollie's checkout pages — which you are redirected to when you press "Purchase" — set their own cookies. Those are governed by Mollie's privacy policy linked above.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten"), within the limits of our legal retention obligations (notably the 7-year tax records);
• restrict processing of your data;
• data portability — receive your data in a machine-readable format;
• object to processing based on legitimate interest; and
• withdraw consent, where consent was the legal basis.

To exercise any of these, email [EMAIL]. We will respond within 30 days.

You also have the right to lodge a complaint with your national supervisory authority. In the Netherlands this is Autoriteit Persoonsgegevens.

7. Children

This site is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data to us, please contact us so we can remove it.

8. Security

The site is served exclusively over HTTPS (TLS) using a certificate issued by Let's Encrypt and auto-renewed by TransIP. Order data lives only in our email inbox and in Mollie's systems; we do not operate a customer database.

9. Changes to this notice

We may update this notice when our processing changes — for example, when we add a new shipping carrier or switch hosting provider. Material changes are reflected in the "last reviewed" date at the top of the page.

10. Contact

For any privacy question or rights request: [EMAIL].