Privacy Policy
Last updated: September 2026
I respect your privacy and want you to understand how your personal information is collected and used when you visit my website or purchase artwork from my online shop.
This Privacy Policy explains what personal data I collect, why I collect it, how it is used, who it may be shared with, and what rights you have regarding your personal data.
1. Who I am
This website and online shop are operated by:
Izabela Valentina Pakan
I am the controller responsible for the processing of your personal data on this website.
If you have any questions about how your personal data is handled, you can contact me at izabela.pakan@gmail.com
2. What personal information I collect
I collect personal information when you purchase an artwork, contact me, or interact with certain features of my website.
The information I collect depends on how you use the website.
When you purchase an artwork
When you buy something from my online shop, I collect personal information from you to fulfil your order.
This may include:
Your name
Billing address
Shipping address
Email address
Phone number, if provided
Details relating to your purchase
Order and payment history
I provide this information to Squarespace, my online store hosting provider, so that they can provide website and ecommerce services to me.
I also provide the information necessary to deliver your order to my shipping service provider, such as PostNL or DHL.
My payment processor, Stripe, also receives information necessary to process your payment. Stripe processes personal data in accordance with its own privacy policy. Squarespace Help
3. Payments
I use Stripe as a third-party payment processor through Squarespace Commerce.
When you make a purchase, Stripe receives information necessary to process the transaction. This can include transaction information and information entered during checkout.
I do not store your full credit or debit card details myself.
Stripe may process personal data for purposes including payment processing, fraud prevention, and handling payment-related disputes. You can read more about how Stripe processes personal data in its privacy policy. Stripe
Stripe Privacy Policy:
Stripe Privacy Policy
4. Shipping and delivery
When you purchase a physical artwork from my website, I collect personal information necessary to ship your order to you.
This may include:
Your name
Shipping address
Email address
Phone number, if provided
Details relating to your order
I use this information to prepare and deliver your order.
I may share the necessary information with shipping providers such as PostNL or DHL so that they can deliver your artwork.
I only provide the information necessary for the delivery of your order.
5. Contact form and email
If you contact me through my website's contact form or directly by email, I may collect:
Your name
Email address
The contents of your message
Any other information you choose to provide
I use this information to respond to your enquiry.
For example, you may contact me about an artwork, a potential commission, a collaboration, or another question about my work.
I do not currently use the information submitted through my contact form to automatically subscribe you to a newsletter or marketing mailing list.
6. Website analytics
This website may collect information to help me understand how visitors use my website through Squarespace Analytics.
Depending on your cookie preferences, this information may include:
Information about your browser, network, and device
Your IP address
Web pages you visited before visiting this website
Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps
This information is provided to Squarespace, my website analytics provider, to help me understand website traffic and activity.
Squarespace's current privacy-policy guidance specifically describes these categories of information as data that may be collected for Squarespace Analytics. Squarespace Help
Where applicable, analytics and performance cookies are only used after you acknowledge the cookie banner.
7. Cookies
This website uses cookies and similar technologies. Cookies are small files or pieces of text that are stored on your device when you visit a website.
Some cookies are necessary and required for Squarespace to securely operate the website and allow important features to function, including ecommerce features such as shopping carts and checkout.
Other cookies are analytics and performance cookies. These may collect information about how visitors interact with the website and help me understand website traffic and activity.
According to Squarespace, necessary cookies are used to allow visitors to navigate and use key features of a Squarespace website, while analytics and performance cookies collect information about how visitors interact with the site. Squarespace Help
On this website, non-essential cookies are subject to your cookie preferences. Where consent is required, they will only be used after you have acknowledged the cookie banner.
You can change or withdraw your cookie preferences through the cookie settings on this website.
For more information about the cookies used by Squarespace, see Squarespace's cookie information:
I do not currently use Google Analytics or Meta Pixel on this website.
8. Squarespace
This website is hosted and operated using Squarespace.
Squarespace processes certain personal data on my behalf in order to provide website hosting, ecommerce, security, and other website services.
Squarespace may process information relating to visitors and customers, including information required to operate the online shop and process orders.
Squarespace explains that website owners should identify the personal information their site collects and how it is used, including information processed through third-party services connected to the website. Squarespace Help
For more information, you can read Squarespace's privacy documentation:
9. Instagram
My website contains a link to my Instagram account.
The Instagram account is not embedded into my website and my website does not display an Instagram feed or Instagram videos directly.
If you click the Instagram link, you will leave my website and visit Instagram. Instagram/Meta may then collect and process information according to its own privacy policy and terms.
10. Why I use your personal data
I use personal data for the following purposes:
To process and fulfil purchases
To arrange delivery of artwork
To process payments
To communicate with customers about their orders
To respond to questions and enquiries
To discuss potential commissions or collaborations
To maintain and secure my website
To comply with legal and accounting obligations
To understand website traffic and improve my website, where applicable and where you have given consent for analytics cookies
I do not sell your personal data.
11. Legal bases for processing
Under the General Data Protection Regulation (GDPR), I process personal data on the following legal bases, depending on the situation:
Performance of a contract
I process information that is necessary to fulfil an order you have placed, such as your name, address, contact details, and order information.
Legal obligation
I may need to retain or process certain information to comply with legal, tax, accounting, or other legal obligations.
Consent
Where consent is required, such as for certain optional cookies or analytics, I process your personal data only after you have given your consent.
You can withdraw your consent at any time.
Legitimate interests
I may process certain information where this is necessary for my legitimate interests, such as maintaining website security, preventing misuse, and managing my business, provided that these interests do not override your fundamental privacy rights.
The Dutch Data Protection Authority recommends stating the purposes and corresponding GDPR legal bases in a privacy statement. Autoriteit Persoonsgegevens
12. Who I share your information with
Depending on how you use my website, your personal data may be shared with or processed by:
Squarespace — website hosting and online shop services
Stripe — payment processing
PostNL, DHL, or another shipping provider — delivery of your order
Professional advisers or authorities, where disclosure is required by law
I do not sell your personal information.
Third-party providers process information according to their own privacy policies and, where applicable, their agreements with me.
13. How long I keep your information
I only keep personal data for as long as necessary for the purposes described in this Privacy Policy.
Information relating to purchases may need to be kept for longer periods where this is required by tax, accounting, or other legal obligations.
Information submitted through my contact form or by email is generally kept for as long as necessary to respond to your enquiry and manage any resulting communication.
Analytics information may be retained according to the settings and retention periods provided by Squarespace.
14. International data transfers
Some of the companies I use to operate my website, including Squarespace and Stripe, may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, the relevant provider is responsible for implementing appropriate safeguards as required under applicable data protection law.
For more information about international data transfers, please refer to the privacy policies of Squarespace and Stripe.
15. Your privacy rights
Under the GDPR, you may have the right to:
Access the personal data I hold about you
Correct inaccurate or incomplete personal data
Request deletion of your personal data where legally possible
Request restriction of processing in certain circumstances
Object to certain processing
Request data portability where applicable
Withdraw consent where processing is based on consent
To exercise one of these rights, please contact me at:
[your email address]
I may need to verify your identity before fulfilling certain requests.
You also have the right to make a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe that your personal data is being processed unlawfully.
The Dutch Data Protection Authority states that a privacy statement should explain, among other things, who is responsible for the processing, what personal data is processed, why it is processed, who receives it, how long it is retained, and relevant privacy rights. Autoriteit Persoonsgegevens
16. Security
I take reasonable measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
My website is hosted through Squarespace, which uses security measures including TLS for secure website connections. Squarespace also states that its Commerce payment processors, including Stripe, comply with applicable PCI security standards. Squarespace Help
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
17. Changes to this Privacy Policy
I may update this Privacy Policy from time to time if my website, services, or the way I process personal data changes.
The most recent version will always be available on this page.
Last updated: September 2026
18. Contact
If you have any questions about this Privacy Policy or about how your personal data is handled, please contact me: