Privacy Policy

Effective Date: 1 June 2026

This Privacy Policy explains how your personal information is collected, used, and protected when you visit or make a purchase from this website ("Site"). We comply with the General Data Protection Regulation (EU 2016/679 — GDPR).

1. Data Controller

The Data Controller responsible for your personal data is:

Owner: Dorota Simińska
NIP: 7891644285
REGON: 52006827700000
Address: UL. SŁOWACKIEGO 20A/22, PL-62-300, Września, Poland
Email: dorota.siminska@gmail.com

2. Personal Data We Collect

We may collect the following categories of personal data:

Name and surname
Shipping address
Email address
Order details (products purchased, date, amount)
Payment-related information (processed securely by Stripe — we do not store full card numbers)
Technical data related to essential cookies (see Cookie Policy)

3. Purpose of Data Processing

Your data is processed for the following purposes:

To process and fulfill your orders
To provide shipping and delivery of the products
To contact you about your order or customer support requests
To comply with legal obligations (tax and accounting)

4. Legal Basis for Processing

We process your personal data based on:

Contract necessity — to fulfill and manage your order.
Legal obligation — to comply with tax and accounting laws.
Consent — only if optional features are added in the future (for example, non-essential cookies or marketing communications).

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, and as required by applicable tax and accounting legislation.

6. Data Sharing

We do not sell your personal data. We only share your data with trusted third parties when necessary:

Stripe — secure payment processing (receives your name, email and billing details to take payment).
CreativeHub (theprintspace) — print-on-demand fulfilment of art prints. Receives your name, shipping address, phone number and email so your order can be printed and shipped directly to you.
Shipping carriers — to deliver your order.
Supabase — database and file hosting where your order and account data are stored.
Resend — sending transactional emails (order confirmations and updates); receives your email address and name.
Vercel — website hosting and privacy-friendly, cookieless analytics.

These providers act as data processors and only receive the data strictly necessary to perform their services. Some of them may process data outside the EU/EEA under appropriate safeguards (e.g. Standard Contractual Clauses).

7. Your Rights (GDPR)

As a data subject under GDPR, you have the following rights:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure (“right to be forgotten”), in certain cases
Right to restriction of processing
Right to data portability
Right to object to processing, where applicable based on your specific situation

To exercise any of these rights, contact us at dorota.siminska@gmail.com.

You also have the right to lodge a complaint with your local Data Protection Authority.

8. Cookies

This Site uses only essential cookies required for the basic functioning of the website and checkout. For more information, see our Cookie Policy.

9. Security of Your Data

We take reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page and will apply from the date of publication.