Privacy policy

This site is run by Anna Zolnierowicz (Aria Soldato), based in Poland. When you buy an artwork or get in touch, you share some personal information with me. This page explains what I collect, why, and what you can do about it.

What I collect

• Orders: your name, email, shipping address, phone number, and which pieces you bought. Payment is processed by Stripe, so I never see or store your card details.
• Messages: the name, email, and message you send through the contact form.
• Site usage: anonymous, cookieless analytics from Vercel (page views, roughly which country) so I can see how the site is doing.

Why

Order data is used to fulfil and ship your purchase, and to meet my accounting obligations in Poland. Messages are used to reply to you. Analytics are used to improve the site. I never sell your information, and I don't send marketing emails.

Who sees it

A small number of service providers process data on my behalf: Stripe (payments), Vercel (hosting, analytics), Neon (database hosting for orders), and the shipping carrier I use for your package. Each of them only sees what they need to do their job.

How long

Order records are kept for as long as Polish tax law requires (currently 5 years from the end of the tax year in which the sale happened). Contact-form messages are kept as long as they're useful for our conversation, then deleted.

Cookies

The site itself doesn't set tracking cookies. Analytics use a cookieless method. If you check out through Stripe, Stripe may set its own cookies on their checkout page. Those are covered by Stripe's own privacy policy.

Your rights

Under the EU GDPR you can ask to see the data I hold about you, correct it, delete it, restrict how it's used, or get a copy you can take elsewhere. You can also complain to the Polish data protection authority (UODO) if you think I've got something wrong.

To make any of these requests, email me at aria.soldato@gmail.com.