Last updated 2026-08-30
Privacy notice
This is a small shop run by one person. This page describes exactly what is collected, why, and how to switch parts of it off.
What is collected
- Order details
- Your name, email, shipping address, phone number, and what you bought. Needed to take payment and post the piece to you.
- Account details
- If you create an account: your email, name, and any marketing preference you set.
- Mailing list
- Your email address, when you gave it, and where on the site you gave it.
- Messages
- Anything you type into a contact or enquiry form.
- Usage data
- Pages viewed, artworks viewed, searches run, and where you arrived from. Stored against a first-party cookie, not a name.
Payment
Card details are handled entirely by Stripe and never reach this site or its database. What comes back is a payment reference, the amount, and the address you gave Stripe for delivery and tax. Stripe acts as an independent controller for the payment itself, under their own privacy policy.
Cookies
Three kinds of cookie are used, and only the first is set without asking you.
- Strictly necessary
- A visitor identifier, your sign-in session, and your cart. The site cannot take an order without these.
- Analytics
- Measures which pieces get attention and where people leave the buying process. Off until you allow it.
- Advertising
- Google Ads, YouTube, and Meta conversion tags, plus building retargeting audiences. Off until you allow it.
You can change your answer at any time: .
Advertising and how your data is used for it
Advertising signals are recorded first-party, meaning the event is written to this site’s own database before any advertising platform sees it. Only events recorded while you had advertising consent switched on are ever shared with, or used to build audiences for, Google, YouTube, or Meta. Nothing you type into a form is used for advertising, and no data is sold.
If you would rather not be counted at all, reject advertising cookies. Doing so does not change prices, availability, or anything else about how the shop works for you.
Who else sees your data
- Stripe
- Payment processing, tax calculation, and fraud checks.
- Vercel
- Hosting and request logs.
- Neon
- The database, hosted in the region set for this project.
- Resend
- Sending order confirmations, sign-in links, and list emails.
- Google and Meta
- Only if you consent to advertising cookies.
No one else. Your details are not sold, rented, or traded.
How long it is kept
Order records are kept for as long as tax and accounting rules require, which in practice means several years. Mailing list entries are kept until you unsubscribe. Usage data older than two years is deleted. Messages sent through a contact form are kept while the conversation is useful and then removed.
Your choices
You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted, other than records that must be kept for tax purposes. Every list email has a one-click unsubscribe. To make a request, email atelier@phoena.art.
Age
This shop is intended for adults. Accounts and orders are for people aged 18 or over, and an account is not knowingly created for anyone under 18. If you believe someone under 18 has given us personal information, write to the studio and it will be deleted.
Questions about any of this can go to atelier@phoena.art. See also terms of sale and shipping and returns.