Privacy Policy

Last updated: October 8, 2026

Data controller
Alina Levy-Schiau (Alina Schiau), visual artist, 9 rue de l'Artoire, 78610 Auffargis, France — alina.schiau@gmail.com

Data collected
When you place an order: first and last name, shipping and billing addresses, email address, phone number and order details. Payment data is processed directly by the payment provider and is never stored by Alina Schiau.
When you send a message (email or contact form): your name, email address and the content of your message.
When you subscribe to the newsletter: your email address.
When you browse the website: technical data (device type, browser, pages viewed) collected through cookies, as described below.

Purposes and legal bases
— Processing and delivering your orders, issuing invoices and certificates of authenticity: performance of the contract.
— Keeping accounting records: legal obligation.
— Answering your messages: legitimate interest.
— Sending the newsletter: consent.
— Measuring website traffic: consent.
— Keeping the website secure and preventing fraud: legitimate interest.

Recipients
Your data is intended for Alina Schiau. It is shared, only as necessary, with her service providers: Shopify (website hosting and store management), payment providers, the carriers in charge of delivery, and Substack (newsletter delivery). Your data is never sold or transferred to third parties for marketing purposes.

Transfers outside the European Union
Some service providers may process data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses or an equivalent recognised mechanism.

Retention periods
— Customer data: for the duration of the business relationship, then 3 years from the last purchase or contact.
— Invoices and accounting records: 10 years.
— Messages: 3 years from the last exchange.
— Newsletter: until you unsubscribe.
— Cookies: 13 months maximum.

Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to give instructions regarding your data after your death. To exercise these rights, write to alina.schiau@gmail.com. You will receive a reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Cookies
The website uses cookies that are necessary for it to work (cart, security), which do not require your consent. Audience measurement cookies are only placed with your agreement, collected through the banner displayed on your first visit. You can change your choice at any time from this banner or your browser settings.

Security
Payments are encrypted and processed by certified providers. Alina Schiau takes reasonable measures to protect your data.