Privacy policy

Privacy Policy


Last updated: August 5th 2025

1. Information collected
To process your orders and provide you with a great experience, I collect the following personal information:

  • Contact details: your name, email address, postal address, and phone number.
  • Payment information: processed securely through Shopify payment. I do not store your payment card details.
  • Usage data: through cookies and analytics tools to improve your experience.
  • Workshop registration details: your email and name for event participation.



2. How and why your personal information is used

I only use your data when I have a lawful basis under the GDPR:

  • To process orders and workshop registrations (Legal basis: Contract): to fulfill orders, ship products, and register you for events.
  • To communicate with you (Legal basis: legitimate interest): about your orders, events, or support inquiries.
  • For marketing emails (Legal basis: consent): only if you’ve opted in. You can unsubscribe at any time.
  • To improve my website (Legal basis: legitimate interest): using anonymized data to enhance user experience.
  • To comply with legal obligations (Legal basis: legal requirement): For taxes, accounting, or lawful requests.

3. Sharing your information

I never sell your personal information. I only share data with trusted third parties when necessary to run my business:

  • Shopify: My store is hosted on Shopify, which collects and processes customer data on my behalf to provide the platform's services, and securely processes payments.
  • Shipping providers: For delivering physical items.
  • Email platforms: If you subscribe to newsletters.
  • Authorities: When legally required.

4. Cookies and tracking
This website uses cookies and similar tracking technologies to enhance your experience, analyze site usage, and offer personalized content. For detailed information on the cookies used and how you can manage them, please see the Cookies Policy.

  
5. Your rights and how to exercise them:
Under the GDPR, you have the following rights over your personal data:

  • Access your personal data held here
  • Request correction or deletion of your data
  • Object to or restrict our processing of your data
  • Withdraw your consent at any time
  • Request data portability (a copy of your data)

     

To exercise these rights, please contact me at artbyleyawenn@gmail.com


6. Data security and retention
I take appropriate technical and organizational steps to secure your data. I only retain data as long as needed to fulfill services and comply with legal obligations.


7. International transfers
If you order from outside the EU, your personal data may be transferred internationally, outside the European Economic Area (EEA). I ensure adequate protection is set for your data using the European Commission’s Standard Contractual Clauses with my service providers.

8. Children’s Privacy
 These products and services are not intended for children under 13. I do not knowingly collect data from children without parental consent.

9. Contact
If you have any questions or concerns about your privacy or this policy, please contact me at:

Art by Leyawenn S.R.L. (the data controller of your information)
Email:   artbyleyawenn  [at]  gmail  [dot]  com
Registered address: Strada Locotenent Aviator Radu Beller 3-5, 011701 Bucharest, Romania