1. Who I Am My website address is: https://lendmeyourunderbelly.com. I am an independent artist operating from the Netherlands. For the purposes of the General Data Protection Regulation (GDPR), I am the data controller of your personal information. If you have any questions about this policy or your data, you can reach me via the contact form on my website.
2. What Personal Data I Collect and Why I only collect the personal data necessary to provide you with a smooth shopping experience, deliver your artwork, and keep you updated on my creative journey.
- Shopping & Account Creation: When you purchase artwork or create an account, I collect your name, billing address, shipping address, email address, phone number, and account password (encrypted). This data is required to process your order, generate your invoice, and handle shipping.
- Legal basis: Performance of a contract.
- Newsletters (MailPoet): If you choose to sign up for my newsletter, I collect your email address to send you updates on new works, exhibitions, and studio insights. I do not track your name for this, just your email. You can unsubscribe at any single click using the link at the bottom of any newsletter.
- Legal basis: Consent.
- Product Reviews: If you leave a review on a product, I collect the data shown in the comments form, your name, your IP address, and browser user agent string to help with spam detection.
- Legal basis: Legitimate interest.
- Contact Forms (Contact Form 7): If you use the contact form to reach out to me, I collect your name, email address, and the message content so that I can respond to your inquiry.
- Legal basis: Legitimate interest.
3. Cookies and Tracking Technologies My website uses cookies to enhance functionality, manage shopping carts, and analyze performance. (Note: You can manage your specific cookie preferences at any time via the cookie banner provided by Complianz).
- Functional & Login Cookies: If you have an account and log in, cookies are used to save your login information and screen display choices. If you leave a review, you can opt-in to saving your name and email in cookies for your convenience.
- Analytics (Google Analytics via Site Kit): I use Google Analytics to understand how visitors interact with my site (e.g., page views, time spent on site). This data is anonymized, your full IP address is masked, and it helps me improve the website layout and content.
- Marketing & Pixels (Pinterest for WooCommerce): My site utilizes integration tools like the Pinterest plugin, which may use cookies or tracking pixels to measure site interactions and the effectiveness of social media sharing.
4. Who I Share Your Data With I respect your privacy and never sell your personal data. I only share necessary information with trusted third-party service providers essential to running my business:
- Payment Processors: To complete your purchase securely, your payment details are handled directly by Mollie (for iDEAL and PayPal) and WooPayments (for credit card transactions). I do not store your credit card or bank details on my server.
- Shipping and Logistics: To deliver your physical artwork, your name and shipping address (and tracking contact details) are shared with postal couriers, primarily PostNL or other flexible insured shipping carriers.
- Analytics & Security: Anonymized traffic data is shared with Google Analytics. Product reviews may be checked through an automated automated spam detection service.
5. How Long I Retain Your Data
- Invoices & Financial Records: For legal and tax compliance with the Dutch tax authorities (Belastingdienst), I am required to retain your billing information, order details, and invoices for a mandatory period of 7 years.
- Account Profiles: For registered users, I store the personal information provided in their user profile indefinitely. Users can see, edit, or delete their personal information at any time (except they cannot change their username).
- Reviews: If you leave a review, the review and its metadata are retained indefinitely so I can recognize and approve follow-up reviews automatically.
6. Your Rights Under the GDPR If you reside within the European Union, you hold the following statutory rights regarding your personal data:
- Right of Access & Portability: You can request a copy of the personal data I hold about you.
- Right to Rectification or Erasure: You can ask me to correct inaccurate data or completely erase your personal data (the “right to be forgotten”). This does not include data I am legally obligated to keep for administrative, tax, or legal security purposes.
- Right to Object/Withdraw Consent: You can withdraw your consent to receive newsletters at any time.
To exercise any of these rights, please contact me through my contact page. If you believe your data has been handled incorrectly, you also have the statutory right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens.