Privacy Policy

Who we are

This website is operated by Aga Szczuka, an independent artist based in South Wales, United Kingdom.
Website address: https://agaszczuka.co.uk
For privacy-related enquiries, please contact: agaszczuka@gmail.com

What Personal Data We Collect and Why

We collect information to process orders, communicate with you, and improve your experience on this website.

Orders and Purchases

When you purchase an original painting or commission, we collect your:

  • Name
  • Billing and shipping address
  • Email address
  • Payment details (processed securely through Stripe — your card details are not stored on this site)

This information is used solely to fulfil your order and keep you updated about your purchase.

Contact Forms

If you contact me through a form on this website, I will collect your name, email address, and any other details you choose to include. This information will be used only to respond to your enquiry and will not be shared or added to any marketing list without your consent.

Workshop Bookings

If you register or enquire about a workshop, your contact details will be used only for communication regarding that event or related updates.

Cookies

Cookies are small files placed on your device to help the website function properly and improve your browsing experience.
This site may use cookies to:

  • Remember your preferences (e.g. login information or cookie consent)
  • Improve site performance and security

You can disable cookies in your browser settings at any time.

Who We Share Your Data With

Payment Processing: Payments are securely processed via Stripe, which complies with UK and EU data protection regulations.

Spam Protection: Comments and contact forms may be checked through automated spam detection services.

Your information is never sold or shared with third parties for marketing purposes.

How Long We Retain Your Data

Order and payment records are retained for up to six years for accounting and legal purposes.

Contact form submissions are retained for up to one year unless you request their removal.

Your Rights Under UK Data Protection Law

You have the right to:

  • Request a copy of any personal data held about you
  • Request correction of inaccurate information
  • Request deletion of your personal data (where legally permissible)
  • Withdraw consent to data processing at any time

To exercise these rights, please contact agaszczuka@gmail.com.

Where Your Data Is Stored and Sent

Your data is stored securely on UK or EU-based servers. Some anonymised data may be processed by third-party services such as Stripe or email providers, all of which comply with UK GDPR standards.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in business practices or legal requirements. The updated version will always be available on this page.

If you have any questions about how your data is handled, please get in touch at agaszczuka@gmail.com.