Privacy Policy
This policy explains what personal data The Painting Studio collects through thepaintingstudio.art, why we collect it, and what rights you have over it. It is written to comply with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
1. Data controller
The controller is The Painting Studio, [registered address — to be completed], Paris, France. For any question about your data, write to hello@thepaintingstudio.art.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, postal address, phone | Processing and delivering your order, customer service | Performance of the contract |
| Order and payment history | Order management, accounting, legal obligations | Contract and legal obligation |
| Email address (newsletter) | Sending news and offers | Consent |
| Contact form messages | Answering your enquiry | Legitimate interest |
| Photographs sent for a commission | Producing the commissioned painting | Performance of the contract |
| Browsing data and cookies | Site operation, audience measurement | Legitimate interest or consent depending on the cookie |
We never sell your personal data.
3. Who has access to it
Your data is shared only with the processors needed to run the service, each bound by contract:
- Hostinger — website and database hosting
- Stripe / WooCommerce Payments — payment processing (we never see your card number)
- Brevo (Sendinblue) — newsletter sending
- Google Analytics — audience measurement, subject to your cookie consent
- Carriers, for delivery only
4. Photographs sent for a commission
Images you send us for a custom painting are used solely to produce that painting. They are not published, resold or used for promotion without your express written consent, and are deleted on request once the order has been completed.
5. How long we keep it
- Customer account and order data: for the duration of the business relationship, then archived for 10 years to meet accounting obligations
- Newsletter subscribers: until you unsubscribe, then 3 years maximum
- Contact form messages: 3 years from the last contact
- Cookies: 13 months maximum
6. Your rights
You have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw consent at any time where processing is based on consent. Write to hello@thepaintingstudio.art; we reply within one month. If you believe your rights are not respected, you may lodge a complaint with the CNIL (cnil.fr) or your national supervisory authority.
7. Cookies
We use cookies that are strictly necessary for the site to work (session, cart) and, subject to your consent, audience-measurement cookies. You can accept, refuse or change your choices at any time through the consent banner, or by clearing cookies in your browser settings.
8. Security and international transfers
We apply appropriate technical and organisational measures to protect your data, including HTTPS encryption across the whole site. Some of our processors may store data outside the European Union; in that case transfers are governed by the European Commission’s Standard Contractual Clauses.
9. Changes
This policy may be updated. The current version is always the one published on this page.