Privacy

This page explains what personal data dimapantyushin.com collects, why, and how you can control it. We collect as little as possible.

Who we are

This site is operated by Dima Pantyushin, sole trader. Business postal address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom. Contact: dp@dimapantyushin.com.

What we collect

We only collect personal data when you place an order. At checkout, Stripe (our payment processor) collects on our behalf:

• Name
• Email address
• Billing and shipping address
• Phone number (if you provide one)
• Payment card details (handled entirely by Stripe — we never see or store your full card number)

We do not otherwise ask you to create an account, and we do not collect personal data just from browsing the site.

Cookies and local storage

This site does not use cookies for tracking or advertising. The shopping cart is stored only in your browser’s localStorage, on your own device — it is never sent to us until you check out, and clearing your browser data will clear it. We do not run any analytics or advertising trackers.

Who we share data with

• Stripe, Inc. — processes payment and collects the checkout details above. See Stripe’s privacy policy.
• Cloudflare, Inc. — hosts this website and its infrastructure, and may process technical data (such as IP address) as part of standard web hosting and security. See Cloudflare’s privacy policy.

We do not sell your personal data, and we do not share it with anyone else except as needed to fulfil your order (for example, a courier’s tracking system) or where required by law.

Why we process this data and for how long

We process your order details to fulfil the contract of sale (deliver your artwork, handle any returns, and meet our legal obligations, e.g. accounting and tax records). Order records are kept for 7 years, after which they are deleted unless we are required to keep them longer by law.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you and get a copy of it
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to our legal obligation to keep order/tax records for the period above)
• Object to or restrict certain processing
• Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you think we have mishandled your data

To exercise any of these rights, email dp@dimapantyushin.com.

Data controller registration

Based on the ICO self-assessment, we are not required to pay the data protection fee and are not listed on the public register. This does not affect your data-protection rights.

Changes to this policy

We may update this page from time to time; the version published here is the one in effect.