Privacy policy
Last updated : June 2026
This policy explains how your personal data is collected and processed when you use this website, in accordance with the General Data Protection Regulation (GDPR).
Data controller
Sonia Cotto · [email de contact]. For any question about your data, you can reach us via the contact page.
Data collected
Contact form: name, email address and the content of your message. Artwork purchase: name, email and delivery address, processed by our payment provider Stripe. No banking data is stored on our servers.
Purposes and legal basis
Your data is used to answer your requests, process and ship your orders, and meet our accounting and legal obligations. The legal bases are contract performance (orders), your consent (contact) and legal obligations (invoicing).
Processors
We rely on: Stripe (payment), Resend (confirmation emails), Sanity (content management) and Vercel (hosting). These providers offer GDPR-compliant safeguards.
Retention period
Contact messages are kept for the time needed to handle your request. Order-related data is kept in accordance with legal obligations (notably accounting, up to 10 years).
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, contact us via the contact page. You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr).
Cookies
This site does not use advertising cookies or marketing trackers. Only cookies strictly necessary for payment (Stripe) may be set during a purchase.