Privacy Policy
Effective Date: January 15, 2025
Last Updated: January 15, 2025
Data Controller: Stopme Art Project
Contact: stopmemalkuth@me.com
Location: New York City, NY, USA
Stopme Art Project is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website, view our artwork, or interact with our services. We comply with the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.
1. Information We Collect
1.1 Personal Information You Provide
We may collect the following personal information when you voluntarily provide it:
- Contact Information: Name, email address, phone number when you contact us
- Newsletter Subscriptions: Email address for art updates and exhibition announcements
- Inquiry Details: Information in messages about artwork purchases, commissions, or general inquiries
- Event Information: Details if you RSVP to exhibitions or art events
- Feedback: Comments, reviews, or testimonials you provide
1.2 Information Automatically Collected
When you visit our website, we automatically collect:
- Technical Information: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on site, referring websites, exit pages
- Geographic Data: General location based on IP address (city/region level)
- Cookies and Tracking: Information stored through cookies and similar technologies
1.3 Information from Third Parties
We may receive information from:
- Social Media: When you interact with our social media pages or share our content
- Analytics Services: Aggregated data from Google Analytics (if implemented)
- Hosting Provider: Server logs and security information from Netlify
2. How We Use Your Information
2.1 Primary Purposes
We use your personal information for the following purposes:
- Communication: Responding to your inquiries and providing customer service
- Newsletter: Sending updates about new artwork, exhibitions, and artistic projects (with your consent)
- Website Functionality: Ensuring proper website operation and user experience
- Art Sales/Commissions: Processing artwork purchases and commission requests
- Legal Compliance: Meeting legal obligations and protecting our rights
- Security: Protecting against fraud, abuse, and unauthorized access
2.2 Legal Basis for Processing (GDPR)
We process your data based on:
- Consent: Newsletter subscriptions and marketing communications
- Contract Performance: Artwork sales and commission agreements
- Legitimate Interest: Website security, analytics, and customer service
- Legal Obligation: Tax records, copyright protection, and legal compliance
3. Information Sharing and Disclosure
3.1 Third-Party Services
We may share your information with trusted third parties who help us operate our website:
- Netlify: Website hosting and content delivery (privacy policy: netlify.com/privacy)
- Email Services: Newsletter delivery (if implemented)
- Analytics: Google Analytics for website usage analysis (if implemented)
- Payment Processors: For artwork sales (PayPal, Stripe - if implemented)
3.2 Legal Disclosures
We may disclose your information when required by law or to:
- Comply with legal processes, court orders, or government requests
- Protect our rights, property, or safety and that of our users
- Investigate fraud, security breaches, or policy violations
- Defend against legal claims or litigation
4. Cookies and Tracking Technologies
4.1 Cookie Categories
Essential Cookies: Required for website functionality (no consent needed)
- Session management and security
- Load balancing and technical functionality
- User preferences and settings
Non-Essential Cookies (consent required):
- Analytics: Google Analytics for usage statistics
- Social Media: Instagram, Twitter, Facebook integration
- Marketing: Newsletter signup tracking and conversion analysis
4.2 Cookie Management
You can control cookies through:
- Our cookie consent banner (appears on first visit)
- Browser settings to block or delete cookies
- Opt-out tools provided by third-party services
- Global Privacy Control (GPC) signals (automatically respected)
5. Your Rights and Choices
5.1 GDPR Rights (EU Residents)
If you are in the EU, you have the right to:
- Access: Request a copy of your personal data we hold
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Receive your data in machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Remove permission for consent-based processing
5.2 CCPA Rights (California Residents)
California residents have the right to:
- Know: Information about personal data collection, use, and sharing
- Access: Request specific pieces of personal information
- Delete: Request deletion of personal information
- Opt-Out: Opt out of sale or sharing of personal information
- Non-Discrimination: Equal service regardless of privacy choices
5.3 Exercising Your Rights
To exercise your rights, contact us at:
- Email: artist@stopmemalkuth.com
- Contact Form: Website Contact Page
- Subject Line: "Privacy Rights Request - [Your Name]"
Response Time: We will respond within 30 days (GDPR) or 45 days (CCPA) of receiving a valid request.
6. Data Security and Retention
6.1 Security Measures
We implement appropriate security measures to protect your personal information:
- Encryption: HTTPS/SSL encryption for all data transmission
- Access Controls: Limited access to personal data on need-to-know basis
- Regular Updates: Security software and system updates
- Incident Response: Procedures for security breach notification
6.2 Data Retention
We retain your personal information for the following periods:
- Newsletter Subscriptions: Until you unsubscribe or request deletion
- Contact Inquiries: 3 years from last contact for customer service purposes
- Purchase Records: 7 years for tax and legal compliance requirements
- Website Analytics: 26 months (Google Analytics default)
- Security Logs: 12 months for fraud prevention and security
7. International Data Transfers
Our website is operated from the United States. If you are visiting from outside the US:
- Your information may be transferred to and stored in the United States
- US privacy laws may differ from your home country
- We implement appropriate safeguards for international transfers
- EU visitors benefit from adequacy decisions where applicable
8. Contact Information
Data Controller: Stopme Art Project
Email: stopmemalkuth@me.com
Website: Contact Form
Address: New York City, NY, USA
For EU Residents
If you have concerns about our data processing that we cannot resolve, you have the right to lodge a complaint with your local data protection authority.
For California Residents
For additional information about our privacy practices or to file a complaint, contact the California Attorney General's Office.