Privacy Policy | Lisa Ketty Art

This page explains what happens to your information when you visit lisaketty.com or buy from me. I am the one who handles it - there is no team behind the shop.

What I Collect

Your name, email address and shipping address
Your order history
Payment details, which are handled by the payment provider - I never see your card number
Website usage data through cookies and analytics

Most of this comes from you when you order or write to me. The rest is collected automatically by the shop and by the analytics tools while you browse.

What I Use It For

Packing and sending your order
Writing to you about your order
Answering your emails
Sending occasional updates about new work, if you have signed up - you can unsubscribe at any time

I do not sell your information to anyone.

My Legal Basis

Fulfilling your order and answering your emails: the contract between us.
Keeping order and accounting records: a legal obligation under Danish bookkeeping rules.
Sending you updates about new work, and running analytics cookies: your consent, which you can withdraw at any time.
Keeping the shop secure and working: my legitimate interest in running it.

Who Else Sees It

Shopify - runs the shop and stores the order data
Printful - prints and ships art prints, and needs your address to do it
Payment providers - handle the transaction
Carriers - deliver your parcel

Each of them has their own privacy policy and handles your data under their own terms.

Where Your Data Goes

Some of the companies above process data outside the EU/EEA, including in the United States. They do so under the European Commission's standard contractual clauses or an equivalent safeguard, which is what permits the transfer.

How Long I Keep It

Order data is kept as long as Danish bookkeeping rules require - five years from the end of the financial year. Everything else I delete when it is no longer needed.

Security

The shop runs on Shopify, which encrypts the connection and stores order data on its own systems. Only I have access to my accounts. No system is completely secure, so I cannot promise that nothing can ever go wrong, but I will tell you if something does.

Children

The shop is not meant for children, and I do not knowingly collect information from anyone under 16. If you believe a child has given me their information, email me and I will delete it.

Your Rights

Under the GDPR you can ask me to:

Show you the personal data I hold about you
Correct anything that is wrong
Delete your data, unless I am legally required to keep it
Send you a copy of your data
Stop sending you marketing

Email me at lisakettyj@gmail.com and I will answer within a month, as the law requires.

If you think I handle your data wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.