Privacy Policy

🔒 
Privacy Policy
Last updated: 28th February 2026
Art by Poppet is committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
This Privacy Policy explains how personal information is collected, used, stored, and protected when you visit this website or purchase artwork.
1. Who We Are
Art by Poppet is operated by Joanne Marie Real, a self-employed (autónomo) artist based in Spain.
For the purposes of data protection law, Art by Poppet is the data controller of your personal information.
Contact email: studio@artbypoppet.com
2. Information We Collect
We may collect the following personal information:
• Name
• Email address
• Billing and shipping address
• Telephone number (if provided)
• Purchase details
• Any information you provide via contact forms
• Technical data such as IP address, browser type, and device information
• Website usage data via cookies
3. How We Use Your Information
Your personal data is used only for legitimate business purposes, including:
• Responding to enquiries
• Processing orders and commissions
• Fulfilling deliveries
• Issuing invoices
• Communicating about your purchase
• Complying with legal and tax obligations
• Improving website functionality
Your personal data is never sold or shared with third parties for marketing purposes.
4. Legal Basis for Processing
Under GDPR, we rely on the following lawful bases:
• Contractual necessity – to process and fulfil your order
• Legal obligation – for tax and accounting compliance
• Legitimate interests – to respond to enquiries and improve services
• Consent – where required (e.g. cookies)
5. Payments & Third Parties
This website is hosted on Wix.com. Wix provides secure data storage, databases, and website functionality.
Payments may be processed through secure third-party providers (such as Wix Payments, Stripe, or PayPal). These providers process your payment information in accordance with their own privacy policies.
Shipping providers may receive your name and delivery address solely for the purpose of delivering your order.
6. Data Storage & Retention
Your personal data is stored securely via Wix’s secure servers.
We retain purchase and invoicing data as required by Spanish tax law.
Enquiry data is retained only as long as necessary to respond and manage correspondence.
7. Cookies
This website uses cookies to ensure proper functionality and improve user experience.
Wix provides a cookie banner that allows you to manage your cookie preferences.
You may also adjust cookie settings via your browser.
8. Your Rights Under GDPR
If you are located within the European Union, you have the right to:
• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time (where processing is based on consent)
To exercise these rights, please contact:
Email: studio@artbypoppet.com
You also have the right to lodge a complaint with your local data protection authority in Spain (Agencia Española de Protección de Datos).
9. International Transfers
If you access this website from outside Spain, your information may be transferred to and processed in Spain or other countries where Wix or payment providers operate.
All data transfers are handled in accordance with applicable data protection laws.
10. Contact
If you have any questions about this Privacy Policy, please contact:
Art by Poppet
Email: studio@artbypoppet.com
Location: Spain