Privacy Policy

Privacy Policy
Last updated: January 2026

KsaveraART (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for processing your personal data is:

KsaveraART
Artist: Ksavera (Ksenia Sarmatova)
Germany
Email: ksaveraart@pm.me

2. Information We Collect

We collect the following categories of personal data:

Personal Information: name, email address, shipping address, billing address
Payment Information: processed securely via Shopify Payments (we do not store credit card or payment details)
Order Information: purchase history, order details, communication related to orders
Technical Data: IP address, browser type, device information, cookies, and usage data

3. How We Use Your Information

Your personal data is used for the following purposes:

To process and fulfill orders
To communicate with you regarding orders, shipping, and customer support
To send marketing communications, newsletters, or updates (only with your explicit consent)
To improve our website, products, and services
To comply with legal, tax, and accounting obligations

4. Legal Basis for Processing (GDPR)

We process personal data based on the following legal grounds:

Contract (Art. 6(1)(b) GDPR): to fulfill orders and provide purchased products
Consent (Art. 6(1)(a) GDPR): for marketing communications and optional cookies
Legitimate Interest (Art. 6(1)(f) GDPR): to improve website performance, ensure security, and prevent fraud
Legal Obligation (Art. 6(1)(c) GDPR): compliance with tax and commercial laws

5. Data Sharing and Third Parties

We do not sell your personal data.

Your data may be shared only with trusted third parties where necessary, including:

Shopify (our e-commerce platform)
Payment processors for secure payment handling
Shipping and logistics providers to deliver orders

Some service providers (e.g. Shopify) may process data outside the European Union. In such cases, data transfers are protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We retain personal data only as long as necessary for the purposes stated above and in accordance with legal requirements.

Order and billing data are typically stored for up to 7 years due to tax and accounting obligations
Marketing data is stored until consent is withdrawn

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

To exercise your rights, please contact us at: [your email address]

You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Cookies

We use cookies and similar technologies to enhance your browsing experience and analyze website traffic.

You can manage or disable cookies at any time through your browser settings.
For more details, please refer to our Cookie settings on the website.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data.
However, no method of transmission over the internet or electronic storage is completely secure.