Privacy policy.

Updated 31 October 2026

Who is responsible

Linda Cipruse, Linda Art Gallery & Studio, Casale 31, 52210 Rovinj, Croatia, is responsible for the personal information collected for gallery enquiries and news subscriptions. Contact lindaartsgallery@gmail.com with privacy questions.

News from the studio

If you subscribe, we store your email address, subscription date and a record of your consent and the privacy-notice version. We use them to maintain the mailing list and send monthly news about artwork and workshops. New subscribers confirm their address by email before newsletters are sent. We record confirmation, language, signup source and unsubscribe status. The legal basis is your consent. Signing up is optional and separate from buying anything.

Withdraw consent at any time using the unsubscribe option in a newsletter or by emailing “Unsubscribe”. We stop marketing and delete the active subscription when the request is processed. A minimal suppression record may be retained when necessary to honour your choice. We review the list and remove subscriptions that are no longer needed.

Enquiries and orders

When you submit a custom-work or pet-portrait form, your name, email address and request details are sent to Linda at lindaartsgallery@gmail.com through Resend. Pet-portrait requests also include the pet’s name and type.

Uploaded photos are stored privately and unchanged in Cloudflare R2. Linda receives a login-protected download link by email and in her admin inbox. Photos are not public. They are kept while needed for your request; Linda can delete them, and you can request deletion by email. Abandoned uploads expire after 24 hours and are removed during later upload activity. Older photos may remain as email attachments.

Your contact details and request text are stored in Linda’s private admin inbox to manage and follow up your enquiry. The website keeps a request reference, hashed submission information and delivery status to prevent duplicate messages and limit spam. Other email links open your own email application.

Workshop forms send your chosen activity, preferred date, participant count and contact details directly to Linda’s email. This information is used to arrange your session.

Messages and contact details you send are used to respond to your request and, where relevant, arrange and fulfil an order. The legal basis is steps requested before a contract, performance of a contract, and legal obligations for transaction records. Unsuccessful enquiries are kept only as long as needed to resolve them; order records are retained for the applicable statutory period.

Your shopping cart

A necessary cookie stores your cart selection for up to 30 days after a cart change. When you continue with an order, the website saves your name, email, phone, delivery address if applicable, selected pieces, quantities and prices. It also stores payment references and status, but never full card details. Linda uses these records to answer enquiries, arrange delivery and fulfil orders. Keep your private order link confidential.

Payments through Stripe

When you choose to pay a confirmed order, you leave this site for Stripe’s secure payment page. Stripe processes the contact, order-reference and payment details you provide there. Linda uses the payment record to match and fulfil your confirmed order. Full card details are not entered into or stored by this website. See Stripe’s privacy policy for its processing information.

Service providers

OpenAI Sites and Cloudflare host the website and its order and newsletter records. Stripe processes payments.

Resend delivers enquiry and order notifications, photo download links, newsletter confirmations and opted-in newsletters. Cloudflare stores enquiry photos privately. These providers process data to provide their services, potentially outside the EEA under their privacy and contractual safeguards. We do not sell your email address.

Cookies and external links

The gallery does not add advertising trackers. If you choose to allow analytics, we collect page and product views, cart additions, checkout starts, approximate country, device and browser type, referring website and campaign labels. A random browser-session identifier measures visits; raw IP addresses, full referring URLs and customer contact details are not stored in these analytics records. Analytics starts only after you agree. Visit reports cover a rolling 90-day window; older visit records are removed automatically during routine cleanup. You can change your choice using Privacy choices in the footer. Declining does not affect shopping. A necessary cart cookie remembers your selection in this browser. Hosting or sign-in services may also use necessary technical cookies. Instagram, Facebook and maps open only when you choose their links; their own privacy policies then apply.

On your first visit, we suggest a language using your approximate country. If it is unavailable, we use your browser language or English. You can change the language at any time. Your language choice is saved in this browser.

Your choices and rights

You may request access, correction, erasure, restriction or portability where applicable, object to relevant processing, and withdraw consent. Email Linda to exercise these rights. You can also complain to Croatia’s data protection authority, AZOP, or your local EU supervisory authority. We do not make automated decisions that produce legal or similarly significant effects.

Read about your GDPR rights.