Privacy Policy
Last updated: May 2026
Art by Faelyn ("we", "I", "Faelyn") is a sole proprietorship based in the Netherlands. This policy explains what personal data we collect, why, how long we keep it, and your rights under the GDPR.
1. What we collect & why
Contact form
When you send a message via the contact form, we collect your name, email address, subject, and message. This data is sent via Brevo (Sendinblue, EU) as a transactional email and is not stored in any database beyond the email inbox. Purpose: to reply to your enquiry. Legal basis: legitimate interest.
Newsletter signup
When you subscribe to the studio letters, we collect your email address (and optionally your first name). This data is stored by MailerLite (EU, Lithuania). We use double opt-in: you must confirm your subscription via a confirmation email before any marketing emails are sent. Purpose: sending you the monthly studio letter. Legal basis: consent. You can unsubscribe at any time via the link in every email.
Shop orders
When you purchase a product, we collect your name, email, shipping address, and order details. Payment is processed by Mollie (Netherlands). We never see or store your full payment details. Order records are stored in a Neon (EU) PostgreSQL database. A confirmation email is sent via Brevo. Purpose: fulfilling your order. Legal basis: contract performance.
Analytics
We use Cloudflare Web Analytics, which is cookieless and does not collect personal data. No consent banner is needed. No data is transferred outside the EU.
2. Data processors
| Service | Purpose | Location |
|---|---|---|
| Sanity | Content management (blog, products) | EU |
| Mollie | Payment processing | Netherlands |
| Brevo (Sendinblue) | Transactional email | EU (France) |
| MailerLite | Newsletter | EU (Lithuania) |
| Neon | Order database | EU |
| Cloudflare | Hosting & analytics | EU |
3. Cookies
This website does not use tracking cookies. Cloudflare may set a strictly necessary security cookie (__cf_bm) which does not require consent.
4. Data retention
- Contact messages: kept in email inbox, deleted after 12 months or after the conversation concludes.
- Newsletter subscribers: kept until you unsubscribe.
- Order records: kept for 7 years as required by Dutch tax law.
5. Your rights
Under the GDPR you have the right to access, rectify, delete, restrict, or port your personal data, and to withdraw consent at any time. To exercise these rights, email hello@artbyfaelyn.com.
6. Contact
Art by Faelyn
The Netherlands
hello@artbyfaelyn.com