Privacy Policy

Who is responsible for your data

H. SAMS is the studio of Helmuts Sams, an independent portrait painter based in Latvia. For the purposes of the EU General Data Protection Regulation (GDPR), the data controller for this website is Helmuts Sams, Latvia.

You can reach me at any time at hello@hsams.art.

What data we collect

When you place an order we collect the details you provide: your name, email address, telephone number (optional), shipping address, and the photograph you upload for your portrait.

We also record the details of your order: size, number of subjects, any notes you add, and the referral code you used, if any.

Payment is processed by Stripe. We do not see, collect, or store your card number or bank details.

Why we process your data

We process your data to provide the service you asked for: to create your custom oil portrait, to keep you informed about your order, and to deliver it to you. This is necessary for the performance of the contract we enter into when you place an order.

We send order-related emails (confirmation, progress updates, shipping notice) as part of that contract. We do not send marketing newsletters unless you opt in separately.

Order records are also kept to meet our legal obligations for bookkeeping and tax.

Where your data is stored

Your order details are stored in a database hosted by Supabase. The photograph you upload is stored by Vercel Blob. The website is hosted by Vercel, and transactional emails are sent through Brevo.

Payments are processed by Stripe, which stores payment data in accordance with its own privacy policy.

These providers are located in the EU/EEA or operate with appropriate safeguards under the GDPR.

How long we keep your data

We keep your order details for as long as required for bookkeeping and tax purposes, after which they are deleted.

The photograph you upload is used only to create your portrait. Once your order is complete, you may ask us to delete it at any time, and we will remove it from our storage on request.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to ask us to correct or delete it, to restrict or object to certain processing, and to receive your data in a portable format.

To exercise any of these rights, email ${site.email}. You also have the right to lodge a complaint with your local data protection authority.

Cookies

This website does not use tracking, advertising, or analytics cookies. We do not run third-party analytics scripts.

Changes to this policy

We may update this policy from time to time. The date above shows when it was last revised.