Privacy Policy

Who we are

This website, sharonziv.art, is operated by Sharon Ziv and Noomish Ltd, Cyprus (“we”, “us”). We are the data controller for the personal data described below. For any privacy question or request, contact us at Sharon.b.ziv@gmail.com.

What we collect and why

• Print orders (Prints page): your name, email, country, and optionally your shipping address and notes. Used only to reply to you, process and ship your order, and keep the records required by law. Legal basis: taking steps to enter into a contract with you (GDPR Art. 6(1)(b)) and our legal obligations (Art. 6(1)(c)).
• Collectors List (home page): your email address. Used only to send occasional news about new artworks, prints and exhibitions. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Emails and messages you send us (by email or Instagram): used only to answer you and handle your enquiry or purchase. Legal basis: our legitimate interest in responding to you, or steps toward a contract (Art. 6(1)(b)/(f)).
• Website statistics: only if you click “Accept” in the cookie banner, Google Analytics collects anonymous usage data (pages visited, device type, approximate location, how you arrived). Legal basis: your consent (Art. 6(1)(a)).
• Technical server logs: our hosting provider processes your IP address and browser information for a short time to deliver the website securely. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f)).

We do not sell your data, use it for advertising, or share it with anyone except the service providers listed below.

Cookies

Without your consent, this website sets no tracking or analytics cookies. If you accept, Google Analytics sets the cookies _ga and _ga_* (stored for up to 2 years). Your choice itself is saved in your browser’s local storage so we don’t ask you again. You can change your choice at any time via Cookie Settings, also linked at the bottom of every page.

Fonts are hosted on our own server, so no data is sent to Google Fonts.

Service providers we use

• Netlify, Inc. (USA): website hosting and receiving the order and Collectors List forms.
• MailerLite (UAB MailerLite, Lithuania, EU): sending Collectors List emails.
• Google (Google Ireland Ltd / Google LLC): Google Analytics (only with your consent) and Gmail, which we use to receive form notifications and correspond with you.

Where a provider processes data outside the European Economic Area (for example in the USA), the transfer is protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Links to social media

Our Instagram, Facebook and TikTok buttons are simple links. No data is sent to these platforms when you visit our website. Only if you click one do you leave our site, and the platform’s own privacy policy then applies.

How long we keep your data

• Order and sales records: as long as required by Cyprus tax and accounting law.
• Enquiries that don’t lead to an order: deleted within 12 months.
• Collectors List: until you unsubscribe or ask to be removed.
• Google Analytics data: up to 14 months.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (this does not affect processing that took place before). To exercise any of these rights, email Sharon.b.ziv@gmail.com; we will reply within one month.

You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Commissioner for Personal Data Protection; you may also contact the authority in your own EU country.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.