Privacy Policy

Privacy Policy

 

This is a Privacy Policy regarding Anez Ka Arts Studio, located in Malta, EU. Please read carefully this Privacy Policy together with the Terms and Conditions before using our Website. By accessing and using our Website, you acknowledge that you have read, understood and agreed to the terms of this policy and our terms and conditions.

 

 

Introduction

This Privacy Policy describes how www.anezkaarts.com (the “Website”, “we”, “studio”, “Anez Ka”, “Anez”, “artist” or “us”) collects, uses, and protects your personally identifiable information when you visit or make a purchase from the Website.  The term “you” refers to the user or viewer of www.anezkaarts.com (“Website”). This policy also governs your rights with regards to your personal information provided to www.anezkaarts.com website.

 

Applicability

This Privacy Policy applies to all privacy sensitive information you provide us by making a purchase or visiting the Website. We value your privacy and will take the utmost care in handling and protecting your personal data. We collect data in accordance to the conditions as stated in the GDPR.

 

Privacy Policy Consent

We will not use or share your information with anyone except as described in this Privacy Policy. The use of information collected through our Website shall be limited to the purposes under this Privacy Policy and our Terms and Conditions.

We reserve the right to change this Privacy Policy on the Website at any time without notice and in our discretion in order to reflect changes to out practices, operations or for other legal or regulatory reasons. Any changes we may make to our privacy policy will be posted on this page and the revised version of this document will be marked on the bottom of the document together with the release date. Any updated version of this Policy will be effective immediately upon the posting of the revised Policy unless otherwise specified. By the continuous use of this Website, you agree to the changes made. However, we will not, without your consent, use your Personal Information in a manner materially different than what was stated at the time your Personal Information was collected.

If you do not agree to abide by the terms of this Policy, we strongly dis commend to access or use the Website and Services.

What is Personal Information?

Under the GDPR, personal data is any information that can reasonably identify a specific living person, either alone, or with other information. This broad definition includes traditional personal data like names, date of birth, residential address, email address, location data, bio-metric data, financial information, and more.

To learn more about what is considered personal data in the EU, visit the information page:  https://commission.europa.eu/law/law-topic/data-protection/reform/what-personal-data_en

 

When is your data collected?

The Website can be accessed without the need of you providing the personal data. However, our servers automatically record information available from your browser such as for example device's IP address, browser type, browser version, operating system version and type. Information collected automatically is used for analytical purposes such as Website usage, interactions and traffic statistics. Information collected automatically can also be used to identify potential fraud or abuse. The data statistics and analytics are not aggregated to allow identification of a particular user of the system. 

 

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

 

We DO engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

 

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

 

Services that include elements of automated decision-making include:

• Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
• Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

Some services or features on the Website may however require you to provide certain information - for example you need to provide your name and email address to be able to receive our Newsletter, when you wish to be added to a waitlist or take part in give-aways and other promotional activities, or when you require support or additional information using our online forms.

 

Cookies

We use cookies to collect non-personal data about our users such as browser type, device type and location. This data is used to improve our online shop/website experience and provide better services to our customers. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you.

We may use cookies to collect information about how you use our website or application, such as the pages you have visited, the links you have followed, and the forms you have filled out. We may also use cookies to determine whether you have seen certain content or to store your preferences.

You have the right to decline the use of cookies. Most web browsers allow you to control cookies through their settings. However, if you choose to decline cookies, you may not be able to use certain features or services on our Website or application. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org.

Cookies that we use (both necessary and performance related) can be found under the below link:  https://www.shopify.com/legal/cookies

 

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Sharing of Data” section below.

 

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are within the territorial boundaries of the EEA, we process your personal information under the following lawful bases:

• Your consent
• The performance of the contract between you and the Website such as fulfilling your orders and providing customer support;
• Compliance with our legal obligations;
• To protect your vital interests;
• To perform a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms such as analysing and improving our website and services, and protecting our rights and interests.

What data do we collect?

We collect and process personal data from users who visit our online shop and purchase our products. This includes:

• Name
• Contact information such as email address
• Payment information such as credit card details
• IP address
• Location and residential address
• Browser type
• Device type
• VAT number and basic information about your business such as legal name and company address if you are a business to apply the VAT exemption (if you are based in EU)

The purpose of the data collection is to make the Website available to you and to provide you with services or products purchased by you. This information will be stored by us and shared with third parties to deliver the products to you. All third-party providers are stated below in the following paragraph: ‘Sharing of data’.

Any of the information we collect from you may be used for the following purposes:

• Order management and completion
• Delivery of products and services
• Correct VAT calculation based on your country of residency and your legal status
• Improvement of the Website, products, and services
• Customer Support
• Daily operations of the Website and our services
• Informational purposes to notify you about the new products, initiatives and upcoming events

If you do not provide the information that we request, we may not be able to provide you with the requested products or services.

Promotional Materials

We may also use your personal data to send promotional materials, newsletters, and other marketing communications. This will be done only if you consented to receive promotional communication from us by subscribing to our newsletter or to other marketing initiatives such as give-aways and promotions or the Prestige Luxury Club. You can subscribe and unsubscribe from receiving direct marketing at any time. 

We are committed to keeping your e-mail address confidential and will not disclose your email address to any third parties except as allowed in the information use and processing section or for the purposes of utilizing a third-party provider to send such emails.

All e-mails sent from us will clearly state that we are the sender and how to contact us. You may choose to stop receiving our newsletter by following the unsubscribe instructions included in these emails. However, you will continue to receive essential transactional emails.

 

Data Deletion

Anez Ka Arts is storing your data no longer than necessary, depending on the nature of the data and the purposes of collecting them, unless stated differently by the GDPR/by law. The retention period differs depending on the purpose of collection. Afterwards, we will delete your payment information.

 

Data and Information Security

We take appropriate measures to protect the security of the personal data collected from you. This includes using encryption technologies and other security measures. The Website is SSL protected.

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed. Therefore, while we strive to protect your Personal Information, you acknowledge that

1. there are security and privacy limitations of the Internet which are beyond our control
2. the security, integrity, and privacy of any and all information and data exchanged between you and the Website and Services cannot be guaranteed and
3. any such information and data may be viewed or tampered with in transit by a third party, despite best efforts.

 

Sharing of data

Your Personal Data is not shared by us with any unaffiliated third parties. We share your information with the authorized providers solely to perform the services on our behalf (e.g., payment transactions or shipping services) or to comply with legal requirements. These third parties are given Personal Information they need only to perform their designated functions, and we do not authorize them to use or disclose Personal Information for their own marketing or other purposes. These third-party service providers are required to maintain the confidentiality and security of the data provided to them.

We may disclose information about you to our affiliates for the purpose of being able to offer you related or additional products and services. Any information relating to you that we provide to our affiliates will be treated by those affiliates in accordance with the terms of this Policy.

Examples of providers where your information is shared:

• We use Shopify to power our online store and our Website. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy
• We use Stripe as our payment processor https://stripe.com/en-gb-mt/privacy
• We use DHL as our shipping provider; https://www.dhl.com/content/dam/dhl/local/global/core/documents/pdf/MO-core-lela-local-pdp-policy.pdf
• We use Google to process and store your emails:  https://policies.google.com/privacy?hl=en,
• We use Google Analytics to help us understand how our customers use the Website. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/ . You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout

We use Judge.me Ltd to collect our reviews and testimonials: https://judge.me/privacy  

 

Behavioral advertising

We share information about your use of the Website, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases using cookies or other similar technologies (which you may consent to, depending on your location). For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

• FACEBOOK - https://www.facebook.com/settings/?tab=ads
• GOOGLE - https://www.google.com/settings/ads/anonymous
• BING - https://advertise.bingads.microsoft.com/enus/resources/policies/personalized-ads
• PINTEREST - https://help.pinterest.com/en/article/edit-personalization-settings

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

• We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

 

Data transfer

Depending on your location, data transfers may involve transferring and storing your information in a country other than your own. You are entitled to learn about the legal basis of information transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by us to safeguard your information. If any such transfer takes place, you can find out more by checking the relevant sections of this Policy or inquire with us using the information provided in the contact section.

Your Personal Information may be transferred outside of Europe for storage and further processing into the United States where it may be stored. Despite of the data being stored in an area outside of the EEA, we do our best to protect your data. For more information on how data transfers comply with the GDPR, see Shopify privacy policies:

 

https://www.shopify.com/legal/privacy

https://www.shopify.com/legal/privacy/customers

 

 

Your rights under the GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights and anezkaarts.com aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. You may request access to the personal data we have collected about you. You may also request the correction or deletion of the data that we hold.  You have the right to withdraw your consent where you have previously given your consent to the processing of your information.

We will comply with such requests in accordance with applicable laws. If you wish to be informed what Personal Information, we hold about you or if you want it to be removed from our systems, please contact us via email support@anezkaarts.com.

If you would like to make a complaint, please contact us by e-mail support@anezkaarts.com. We will address your query within the timelines specified by law.

If our response to your enquiry is not satisfactory you have the right to complain to a Data Protection Authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority in the European Economic Area (EEA).

 

Data Retention

We will only retain personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

In accordance with the General Data Protection Regulation (GDPR) and Maltese data protection laws, we retain personal data for the following periods:

1. Data regarding the performance of a contract, such as contact information, will be retained for the duration of the contract, plus seven years.
2. Data collected for the purpose of marketing communications will be retained for as long as you are subscribed to our mailing list or until you opt out.
3. Data collected for the purposes of customer support will be retained for as long as necessary to provide customer service.
4. Data related to internal operations and administration will be retained for seven years.

We may also retain personal data for longer periods of time where such retention is necessary to comply with a legal obligation, or in order to protect the rights, property or safety of our customers, employees or others.

At the end of the applicable retention period, we will securely delete or anonymize your personal data in accordance with applicable data protection laws.

 

Minors

 

We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at support@anezkaarts.com to request deletion.

 

Links to other resources

The Website, Services and this Privacy Policy contain links to other resources that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other resources or third parties. We encourage you to be aware when you leave the Website and Services and to read the privacy statements of each and every resource that may collect Personal Information.

 

What are your data protection rights?

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request us for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request to complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to us processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: - support@anezkaarts.com

 

How to contact us

If you have any questions about Our Company’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: support@anezkaarts.com

 

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office. The supervisory authority in Malta is the IDPC (Information Office and Data Protection Commissioner) which can be contacted on idpc.info@idpc.org.mt. 

 

Document Version: 7.0.

Publication Date: June 2024