# Privacy Policy

**Last updated:** 23/08/2026

## Who we are

This website is operated by Majestic Art. For any questions about how your data is used, contact:

**Email:** jseroberts110@gmail.com

Majestic Art is the data controller for the personal information collected through this site — meaning we decide why your data is collected and what it's used for.

## What we collect

When you get in touch through one of our contact forms, we collect:

- Your name
- Your email address
- Your phone number (optional)
- Your message
- If you're enquiring about a specific painting, which painting you're interested in

We don't collect any other personal data through this site.

## Why we collect it

We use this information to:

- Respond to your enquiry
- Discuss a potential painting purchase with you (the sale itself is arranged directly with you, outside of this website)

The legal basis for this processing is your **consent**, given when you tick the consent box on the form, and, where relevant, the steps necessary to progress a potential purchase at your request.

## Who else sees your data

We use a small number of trusted service providers to run this website. They only process your data to help us provide the service above, they don't use it for their own purposes:

- **Hetzner** (Germany, EU) — hosts our website and database
- **Resend** (United States) — delivers email notifications when you submit a form. Resend is certified under the EU–U.S. Data Privacy Framework and operates under Standard Contractual Clauses, which are the legal safeguards required for transferring data outside the EU
- **Alfie** — built the website on our behalf, and may have technical access to submitted data as part of that work

## How long we keep it

We keep your enquiry until it's resolved. If it isn't resolved for any reason, we delete it after **6 months**.

## Your rights

You have the right to:

- Ask what data we hold about you
- Ask us to correct or delete it
- Withdraw your consent at any time

To do any of this, email jseroberts110@gmail.com.

You also have the right to complain to the Spanish data protection authority (AEPD) if you feel your data hasn't been handled properly: [www.aepd.es](https://www.aepd.es)
