Privacy Policy
Effective: 3 September 2026
This policy explains how Maia Kay Art Prints, based in Czech Republic, handles personal data when you browse the site, create an account, contact us or place an order. For privacy questions, email maiakayart@gmail.com.
1. Data we collect
- Identity and contact details such as name, email address and phone number.
- Billing, delivery, order, refund and customer-service information.
- Account and authentication information, including Google sign-in where chosen.
- Messages and information submitted through contact or support forms.
- Device, approximate location, cookie and usage information.
2. Why we use it
- To fulfil orders, take payment, deliver products and provide support.
- To create and secure accounts and prevent fraud or misuse.
- To comply with tax, accounting, consumer-protection and legal obligations.
- To operate and improve the site, based on consent where consent is required.
- To send marketing only where you have requested it or law otherwise permits it.
3. Legal bases
We process data when necessary to perform a contract or take steps at your request, comply with a legal obligation, pursue legitimate interests such as security and customer service, or where you have given consent. You may withdraw consent at any time without affecting earlier lawful processing.
4. Service providers and recipients
We use specialist providers only where needed to run the store, including:
- Vercel for website hosting and delivery.
- Google Firebase and Google Cloud for accounts, orders, cart data and storage.
- Stripe and PayPal for payment processing and refunds.
- SendGrid for transactional and customer-service email.
- Google Analytics, only when analytics consent is enabled.
- Cloudinary for image delivery and ipapi for approximate country/currency selection.
We may also disclose data to professional advisers, delivery providers, regulators or law-enforcement bodies when reasonably necessary or legally required. We do not sell personal data.
5. International transfers
Some providers may process data outside the European Economic Area. Where GDPR applies, we rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.
6. Retention and security
We keep data only as long as needed for the purpose collected, to resolve disputes and to meet legal, accounting and tax requirements. Retention periods therefore vary by record type. We use reasonable technical and organisational safeguards, but no online system can be guaranteed completely secure.
7. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Email us to make a request; we may need to verify your identity. You may also complain to the Czech Office for Personal Data Protection at uoou.gov.czor to the supervisory authority where you live or work.
8. Cookies and analytics
Essential storage supports functions such as sessions, carts, checkout security and remembering your privacy choice. Optional analytics and advertising-related processing are disabled unless you consent through the cookie banner.
You can withdraw or change consent at any time by selecting Cookie Settings in the footer. See our Cookie Policy for the categories, providers and retention details.
9. Children
The store is not directed to children and we do not knowingly collect personal data from children without appropriate authorisation. Please contact us if you believe a child has provided personal data.
10. Changes and contact
We may update this policy to reflect legal or operational changes. The effective date above identifies the current version. Contact maiakayart@gmail.comwith questions or requests.