Privacy Policy

Effective Date: 10/05/2025

This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Data Controller

The data controller of this website is:
Penelope Elnaz Motaee
Email: penelope@penelopeartwork.com

2. What Personal Data We Collect

We collect the following types of data:

Identification data: your name, surname
Contact data: email address, phone number, shipping/billing address
Transaction data: purchase history, payment details (through secure third-party services)
Usage data: cookies, IP address, browser type, visit duration, and pages viewed

3. Legal Bases for Processing

We process your data under the following legal grounds:

Contractual necessity: to process and ship your orders
Consent: when you subscribe to our newsletter or allow cookies
Legitimate interest: to improve our services and website
Legal obligation: when required by tax or consumer protection laws

4. Why We Collect Your Data

We use your personal data to:

Fulfill your purchases and orders
Communicate with you about your orders or inquiries
Send you updates (only if you opt-in)
Analyze website traffic and improve our platform
Comply with legal obligations (e.g., accounting records)

5. Sharing Your Information

We only share your personal data with:

Service providers (payment processors, courier services, web hosting, email services)
Legal authorities, when required by law

We never sell or rent your personal information.

6. Cookies & Tracking Technologies

We use cookies to personalize your experience and analyze website traffic.
You can manage your cookie preferences via your browser settings.

For more info, see our Cookie Policy.

7. Data Retention

We retain your personal data:

For as long as needed to fulfill the purposes above
As required by law (e.g., for tax/accounting reasons)

8. Your Rights under GDPR

You have the right to:

Access your data
Correct inaccurate data
Request deletion of your data
Object to or restrict processing
Withdraw consent at any time
File a complaint with the Hellenic Data Protection Authority (www.dpa.gr)

To exercise any of these rights, contact us at: penelope@penelopeartwork.com

9. Security

We implement appropriate technical and organizational security measures to protect your data from unauthorized access, loss, or misuse.

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: penelope@penelopeartwork.com
Phone: +306949041498