Privacy Policy

1. Data controller

Doost Corner is operated by Doost Art Gallery, based in the Netherlands. For any privacy-related requests, contact us at [email protected].

2. What personal data we collect

We collect personal data only when you voluntarily provide it through our forms:

• Contact & enquiry forms: name, email address, message content
• Orders & enquiries: name, email, selected artwork and product, gift details if applicable
• Find requests: name, email, preferences (occasion, mood, budget), optional description and uploaded reference images
• Commission requests: name, email, creative brief, budget range

3. Legal basis for processing (GDPR Art. 6)

We process your personal data based on:

• Contractual necessity (Art. 6(1)(b)): processing orders and fulfilling enquiries
• Legitimate interest (Art. 6(1)(f)): responding to contact messages and improving our service
• Consent (Art. 6(1)(a)): storing preferences in local storage (wishlist, cookie consent)

4. How we use your data

• To respond to your enquiry or process your order
• To curate personalized artwork suggestions (Find requests)
• To arrange shipping and gift details
• To send you a reply via email

We do not use your data for marketing, profiling, or automated decision-making unless you explicitly opt in.

5. Cookies & local storage

This site does not use analytics, tracking, or third-party cookies.

We use your browser's local storage for:

• Wishlist: artwork IDs you save (stays on your device, never sent to our server)
• Cookie consent: remembering your preference on the cookie banner

You can clear this data at any time through your browser settings. No personal data is stored in cookies or local storage.

6. Data sharing

We do not sell, rent, or share your personal data with third parties. Your data is only accessible to our team for the purpose of fulfilling your request. Uploaded reference images are stored on our secure server and are not shared externally.

7. Data retention

We retain enquiry and order data for as long as necessary to fulfill your request and for our business records. You may request deletion at any time (see Section 8). Uploaded images are retained only for the duration of the curation process and may be deleted upon request.

8. Your rights under GDPR

Under the General Data Protection Regulation, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: correct any inaccurate personal data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Restriction: restrict processing of your data in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Data security

We take reasonable technical and organizational measures to protect your personal data. Form submissions are transmitted over HTTPS. Data is stored on secure servers within the European Union.

10. Supervisory authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

11. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Contact

For any privacy-related questions or requests, contact us at [email protected].