Privacy Policy
Effective date: May 2026
When you buy a work through this website, we collect only what's necessary to process your order and ship it to you. We don't run a customer database, we don't share your details with third parties for marketing, and we don't track you across the web. If you allow us, we can keep your email contact to let you know about occasional exhibitions or events near you.
01 — Who we are
This website is operated on behalf of BerriBlue. For any questions about this policy, you can reach us at info@berriblue.com.
02 — What data we collect and why
When you place an order, we ask for your name, email address, phone number, and delivery address. This information is used solely to process your purchase and arrange shipping.
Our legal basis for this is performance of a contract (Article 6(1)(b) GDPR) — we need these details to fulfil the order you've placed. We wouldn't be able to ship your work without them.
03 — How your data is stored
We do not maintain a customer database. Your order details are transmitted securely at the time of purchase and received as an order confirmation email. This email is retained for as long as is necessary for accounting and legal purposes — typically up to 5 years in line with standard business record-keeping requirements.
Payment is handled entirely by PayPal. We never see or store your card details. PayPal's own privacy policy governs how your payment data is handled, and you can read it at paypal.com.
04 — Who we share your data with
Your personal data is shared only with the parties necessary to complete your order:
- PayPal — to process payment
- Shipping carrier — your name and delivery address are passed to whichever courier service delivers your order
We do not sell, rent, or share your data with any other third parties.
05 — Optional: staying in touch about future work
At checkout, you may optionally choose to hear from us about future exhibitions, new work, and events. This is entirely separate from your purchase — you can buy a work without consenting to this.
If you consent, your name and email will be retained for this purpose until you ask us to remove them. You can withdraw consent at any time by emailing info@berriblue.com. We will never contact you for commercial marketing purposes unrelated to BerriBlue's artistic practice.
06 — Your rights
Under GDPR, you have the right to access the personal data we hold about you, to request its correction or deletion, to object to processing, and to lodge a complaint with your national data protection authority. In Poland, this is the UODO; in the UK, the ICO.
To exercise any of these rights, contact us at hello@berriblue.com.
07 — Changes to this policy
If we make any material changes to this policy, we'll update the effective date at the top of this page. We won't notify you individually of minor updates.