Last updated: August 2026

This website is operated as a local art print studio and digital portfolio based in Spain (EU). We respect your privacy and process personal data in strict compliance with the General Data Protection Regulation (EU GDPR) and local Spanish data protection laws (LOPDGDD).

1. Data Control

The entity responsible for processing your personal data is:

Contact Email: info@Shadycactusstudio.com

Studio Name: Shady Cactus Studio

Location: Jávea, Alicante, Spain

2. Information We Collect & Why

We follow a strict data minimisation principle — we only collect what is strictly necessary to display our work and process print orders.

A. Inquiries & Custom Print Orders

• Data collected: Name, email address, shipping address, phone number (for courier updates only), and project design specs.
• Legal basis: Contract performance (Art. 6(1)(b) GDPR) and legitimate interest to respond to your queries.
• Retention: Inquiries are retained for as long as necessary to fulfil the request. Order details and invoice records are retained for tax/legal obligations (typically 5–6 years under local tax law).

B. Server Logs & Technical Data

• Data collected: IP address, browser type, operating system, timestamp, and referring URL.
• Purpose & Legal Basis: Security, preventing malicious activity, and technical administration (Art. 6(1)(f) GDPR – Legitimate Interest).
• Retention: Automatically cleared or anonymised within 30 to 90 days by our hosting provider.

C. Direct Marketing (Newsletter)

Legal basis: Explicit consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link at the bottom of any email or by contacting us directly.

Data collected: Email address.

3. Third-Party Service Providers

We do not sell, rent, or trade your personal data. To run our site and shop, we share data only with necessary processing partners bound by GDPR data processing agreements:

Shipping & Local Couriers: [Correos / DHL / Local Courier] (Name and shipping address provided strictly for delivery execution)

Hosting Provider: Fast Hosts UK

Payment Processors: Stripe / PayPal / Google Pay / Apple Pay

4. Cookies & Tracking

We maintain a minimal cookie footprint designed purely to support the shopping experience. We do not use cross-site tracking cookies, retargeting pixels, or invasive behavioural advertising.

• Essential Store Cookies (SureCart): To power the online store, process print orders, and manage checkout, SureCart sets essential session cookies and local browser storage. These store temporary cart identifiers and secure authentication tokens so your bag persists as you browse. These are strictly necessary for the checkout process to function.
• Functional Cookies: If you log into a client account to view past orders, temporary cookies maintain your secure session.
• Analytics: Any metrics gathered are strictly aggregated and anonymised to monitor general site performance — never tied to individual identity or resold.

You can block or delete cookies anytime through your web browser settings. Note that disabling essential cookies will prevent the SureCart checkout from holding your items.

5. Your GDPR Rights

Under EU regulations, you hold the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete data.
• Erasure (“Right to be Forgotten”): Request deletion of your data when it is no longer required for legal or contractual purposes.
• Restriction & Objection: Restrict or object to specific processing activities.
• Data Portability: Receive your data in a structured, commonly used machine-readable format.

To exercise any of these rights, contact us at info@Shadycactusstudio.com

If you believe your data has been handled improperly, you have the right to lodge a complaint with your local supervisory authority (in Spain, the AEPD – Agencia Española de Protección de Datos).