Who we are
This website, istriceillustration.com, is run by Istriceillustra (Istrice Illustration), trade name of Andrea Veronica Franceschi, tax ID (NIF) Z2368604T, C/ Los Llanos 1, 33957 Sotrondio, Asturias, Spain. Contact: [email protected].
What personal data we collect and why
Orders
When you place an order we collect your name, billing and shipping address, email address, phone number and the details of what you bought. We use this data to process and ship your order, to send you order confirmations and updates, and to comply with tax and accounting obligations. Order records are kept for the period required by Spanish law.
A week after we ship your order, we may email you once to ask what you think of what you bought. If you’d rather not receive that email, just use the link at the bottom of it or reply to us.
Payments
Payments are processed by Stripe. Your card details are entered on Stripe’s secure forms and never stored on our server. Stripe’s privacy policy: https://stripe.com/privacy.
Account
You don’t need an account to buy: orders are placed as a guest and we only ask for the details needed to ship them.
Newsletter
If you subscribe to the newsletter, your email address is stored in Mailchimp and used only to send you our news. You can unsubscribe at any time from the link in every email.
Contact form
Messages sent through the contact form are delivered to our email and kept only as long as needed to answer you.
The forms on this website (contact, commissions and newsletter) are protected against spam with Cloudflare Turnstile, which checks that whoever sends them is a person and not an automated program. To do this, Cloudflare processes some technical data from your browser and your connection. More information: Cloudflare’s Turnstile Privacy Addendum
Reviews
If you leave a product review, it is published with your name and your opinion. Your email is not published.
Statistics
If you accept it in the cookie notice, we use Google Analytics to find out, in aggregate, how many people visit the website and which pages they view. If you don’t accept it, it isn’t loaded. More details in the cookie policy.
Catalogue for shops
The shops that sell my work have a private catalogue to place their orders. There we keep each shop’s contact, billing and delivery details, only to manage their orders.
Cookies
The shop uses the technical cookies needed to keep your cart and your session while you browse, and the login cookies if you sign in. We do not use advertising cookies.
Why we can use your data
- Orders, payments and shipping: to fulfil the purchase contract and our tax and accounting obligations.
- The email asking for your opinion after a purchase: our legitimate interest in knowing about your experience with what you bought. You can object whenever you like.
- Newsletter and statistics: your consent, which you can withdraw at any time.
- Contact and commission messages: your own request, so that we can reply to you.
- Spam protection: our legitimate interest in keeping the website secure.
How long we keep it
- Order data, for as long as the law requires for accounting and tax obligations (generally six years).
- Your newsletter email, until you unsubscribe.
- Contact and commission messages, for as long as needed to deal with them.
- Google Analytics data, for a maximum of 14 months.
Who we share your data with
Only with the services needed for the shop to work: Stripe (payments), Mail Boxes Etc. and, for some deliveries, Correos or InPost (shipping), Mailchimp (newsletter), Google (statistics, only if you accept it), Supabase (catalogue for shops), Raiola Networks (hosting, Madrid, Spain) and Cloudflare (security and performance). We never sell your data.
Data outside the European Union
Stripe, Mailchimp, Google, Supabase and Cloudflare are companies based in the United States and may process data outside the European Union. They do so with the safeguards required by the GDPR: the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.
Your rights
Under the GDPR you can ask us to access, correct, export or delete the personal data we hold about you, or to restrict or object to its processing, by writing to [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).