Privacy Policy

GDPR Compliant | Last Updated: January 17, 2026

Introduction

SKR Studio ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or purchase our artworks, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

SKR Studio

Email: [email protected]

What Personal Data We Collect

Information You Provide Directly

Contact Information: Name, email address, phone number, shipping address, billing address
Payment Information: Credit/debit card details (processed securely through Stripe; we do not store full card numbers)
Order Information: Purchase history, artwork preferences, order details
Communication Data: Messages, inquiries, and correspondence you send to us
Account Information: Username, password (if you create an account)

Information Collected Automatically

Technical Data: IP address, browser type, device type, operating system
Usage Data: Pages visited, time spent on site, navigation paths, click behavior
Cookies: Small data files stored on your device (see Cookie Policy section below)

Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

Contract Performance: To fulfill orders, process payments, and deliver artworks (Art. 6(1)(b) GDPR)
Legitimate Interest: To improve our website, prevent fraud, and send marketing communications to existing customers (Art. 6(1)(f) GDPR)
Consent: For newsletter subscriptions, optional marketing communications, and non-essential cookies (Art. 6(1)(a) GDPR)
Legal Obligation: To comply with tax, accounting, and legal requirements (Art. 6(1)(c) GDPR)

How We Use Your Personal Data

Order Processing: To process and fulfill your orders, arrange shipping, and provide customer support
Payment Processing: To securely process payments through our payment provider (Stripe)
Communication: To send order confirmations, shipping updates, and respond to inquiries
Marketing: To send newsletters, promotional offers, and updates about new artworks (with your consent)
Website Improvement: To analyze website usage, improve user experience, and optimize our services
Legal Compliance: To comply with tax laws, accounting requirements, and legal obligations
Fraud Prevention: To detect and prevent fraudulent transactions and protect our business

Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal data. We share your data only with trusted third-party service providers who help us operate our business:

Payment Processing

Stripe: Processes credit card payments securely (PCI-DSS compliant)

Data Shared: Name, email, billing address, payment details

Privacy Policy: stripe.com/privacy

Shipping & Logistics

Carriers: DHL, FedEx, UPS, or local postal services

Data Shared: Name, shipping address, phone number, order details

Purpose: To deliver your artwork

Analytics

Service: Website analytics (anonymized data)

Purpose: To understand website traffic and improve user experience

Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

Right of Access (Art. 15): Request a copy of the personal data we hold about you
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
Right to Restriction (Art. 18): Request restriction of processing in certain circumstances
Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time (does not affect prior processing)
Right to Lodge a Complaint: File a complaint with your national data protection authority

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: [email protected]

Subject Line: "GDPR Data Request"

We will respond to your request within 30 days as required by GDPR.

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Encryption: SSL/TLS encryption for data transmission
Secure Payment Processing: PCI-DSS compliant payment gateway (Stripe)
Access Controls: Restricted access to personal data on a need-to-know basis
Regular Security Audits: Periodic reviews of our security practices
Data Minimization: We collect only the data necessary for our purposes

Cookies Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us improve your browsing experience and analyze website usage.

Types of Cookies We Use

Essential Cookies: Required for website functionality (e.g., shopping cart, checkout)
Legal Basis: Legitimate interest (cannot be disabled)
Analytics Cookies: Track website usage and performance
Legal Basis: Consent (can be disabled)
Marketing Cookies: Track your interests for targeted advertising
Legal Basis: Consent (can be disabled)

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Order Data: 7 years (for tax and accounting purposes)
Marketing Data: Until you withdraw consent or request deletion
Website Analytics: Anonymized data retained indefinitely
Account Data: Until you request account deletion

Questions About Your Privacy?

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

[email protected]

Data Protection Authority:
If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.

Cookie Preferences

We use cookies to enhance your browsing experience and analyze our traffic.

Read our Privacy Policy for more information.