Privacy Policy
Effective Date: 07-07-2026
At Natalie Verstappen, we respect your privacy and are committed to protecting your personal data. We process personal information in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have regarding your personal information.
1. Data Controller
The data controller responsible for your personal data is:
Natalie Verstappen
Email: Natverstappen@gmail.com
VAT Number: [VAT Number]
2. Personal Data We Collect
We only collect personal information that is necessary to provide our services or when you voluntarily provide it.
Depending on your interaction with us, this may include:
Full name
Email address
Telephone number (optional)
Billing and shipping address
Country of residence
Payment and transaction information (processed securely by our payment providers)
Purchase history
Communication preferences
Information you choose to provide when contacting us
When you browse our website, we may also automatically collect technical information such as:
IP address
Browser type and version
Device information
Operating system
Website usage statistics
Cookie and analytics data
3. Why We Collect Your Data
Your personal data is processed only where necessary for one or more of the following purposes:
Processing artwork purchases
Shipping orders
Responding to enquiries
Managing customer relationships
Providing information you request
Processing payments
Maintaining business records
Complying with legal and tax obligations
Improving the functionality and security of our website
Sending newsletters and updates where you have provided your explicit consent
We do not collect more personal information than is necessary for these purposes.
4. Legal Basis for Processing
Under Article 6 of the GDPR, we process your personal data on one or more of the following legal grounds:
Your consent
Performance of a contract
Compliance with legal obligations
Our legitimate business interests, provided these do not override your rights and freedoms
You may withdraw your consent at any time where processing is based on consent.
5. Payment Processing
Payments are securely processed by trusted third-party payment providers.
We do not store or have access to your complete credit card or payment information.
Please refer to the privacy policies of the relevant payment providers for information regarding how your payment data is processed.
6. Sharing Personal Data
We never sell, rent or trade your personal information.
Your data may only be shared where necessary with carefully selected service providers, including:
Payment processors
Shipping and courier services
Website hosting providers
IT service providers
Professional accountants or legal advisers where required
Government authorities where legally obligated
These providers process data only on our behalf and in accordance with applicable data protection legislation.
7. International Transfers
If your personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be implemented in accordance with Chapter V of the GDPR to ensure an adequate level of protection.
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable law.
Accounting and tax records are retained in accordance with legal retention requirements.
When your data is no longer required, it will be securely deleted or anonymised.
9. Your Rights
Under the GDPR, you have the right to:
Access your personal data
Correct inaccurate information
Request deletion of your personal data (“Right to be Forgotten”)
Restrict the processing of your data
Object to certain processing activities
Withdraw your consent at any time
Receive a copy of your personal data in a portable format
Lodge a complaint with your national Data Protection Authority
To exercise any of these rights, please contact us at:
Email: Natverstappen@gmail.com
We aim to respond to all requests within one month.
10. Cookies
Our website uses cookies and similar technologies to improve your browsing experience, analyse website performance and ensure the proper functioning of the website.
Where legally required, you will be asked to provide your consent before non-essential cookies are placed on your device.
For further information, please refer to our Cookie Policy.
11. Data Security
We implement appropriate technical and organisational security measures designed to protect your personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
While we strive to safeguard your information, no method of electronic transmission or storage can be guaranteed to be completely secure.
12. Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of those websites and encourage you to review their respective privacy policies.
13. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time to reflect changes in legal requirements or our business practices.
The most recent version will always be published on this page together with the effective date.
14. Contact
If you have any questions regarding this Privacy Policy or how your personal information is processed, please contact:
Natalie Verstappen
Email: Natverstappen@gmail.com
If you are located within the European Union and believe your rights under the GDPR have been infringed, you have the right to lodge a complaint with the competent supervisory authority in your country of residence.