Privacy policy.

Who is responsible

The person responsible for your personal data is Andreia Melo, Rua M. José Moutinho dos Santos, 85, 4475-356 Maia, Portugal (NIF 201380820). You can contact me through the contact form.

What I collect and why

I only collect what I need:

• Contact form: your name, your email address and your message, to answer you. The form is processed by Netlify, the company that hosts this website.
• Newsletter: your email address, to send you news about new paintings, products and the studio. It is stored in Sender, the service I use to send the newsletter, and is only used if you subscribe. You can unsubscribe at any time with the link in every email.
• Orders: purchases are made in my online shop, which collects the data needed to process and ship your order. Its own privacy policy applies there.

Cookies

I use Google Analytics to understand how people find and use this website, so that I can improve it. It sets cookies on your device and collects information such as the pages you visit and roughly where you are. It only starts if you accept in the cookie banner. If you decline, nothing is set. You can change your mind at any time with the "Cookie settings" link at the bottom of every page. Apart from this, the website does not use advertising cookies.

How long I keep it

Contact messages are kept for as long as needed to answer you and to deal with what follows. Newsletter addresses are kept until you unsubscribe. Order data is kept for as long as the law requires.

Who sees it

I do not sell your data. It is only handled by the services I use to run the website, the newsletter and the shop (Netlify, Sender, Google Analytics if you accept it, and the online shop platform), which may process data outside the European Union with the safeguards required by law.

Your rights

You can ask me to see, correct or delete your data, to limit or object to how I use it, and to take back your consent at any time. Write to me through the contact form. You also have the right to complain to the Portuguese data protection authority, the CNPD.