Privacy

Version 20 October 2026. Studio Oever, Dutch Chamber of Commerce 84896108, Kerksteeg 7, 8325 BE Vollenhove, Netherlands, is responsible for this shop’s processing. Contact business@oever.art for privacy requests. Postal correspondence: Studio Oever, Dreef 2, apartment 0045, 2012 HR Haarlem, Netherlands.

Data and purposes

We process your name, contact and address details, selected artwork and size, order amount, payment status and correspondence to perform the purchase contract, review the print, deliver, manage returns and meet legal obligations. Stripe processes payment; our shop stores payment references and status rather than complete card numbers or CVC. Security and error information supports our legitimate interest in protecting the shop and payments. We do not use this data to build advertising profiles.

Newsletters rely on your voluntary consent. We record email address, language, consent wording, version and confirmation. Subscription starts only after email confirmation. Unsubscribe using the newsletter link; this stops future marketing without changing earlier lawful processing. Purchasing does not automatically subscribe you.

Service providers

TransIP provides hosting and business email. Stripe receives data for payment, authentication and fraud prevention and also has its own statutory responsibilities. When production is approved, Prodigi receives the necessary order, contact and delivery details and uses a carrier. Brevo delivers service emails and newsletters, processing the recipient address, message and delivery status. Our bookkeeper receives necessary accounting records. We do not sell mailing lists.

Providers may process data outside the European Economic Area, including for payments, production and delivery. Applicable agreements and lawful transfer safeguards must cover that processing; contact us for details of the recipients used for your order. See the privacy information of Stripe, Prodigi, Brevo and TransIP.

Retention and protection

We retain financial records for the statutory period, generally seven years. Other order and service records remain while needed for delivery, warranty, complaints or disputes and are then reviewed for deletion. Contact-form messages are removed during periodic cleanup after 30 days; necessary correspondence may remain in a relevant order or statutory record. Unconfirmed newsletter requests are removed during cleanup after seven days. Active subscriptions remain until withdrawal; we then retain the minimum suppression and consent record needed to respect your choice and address complaints. Our email queue limits message content after seven days to a delivery record. Providers also apply their necessary retention periods.

We limit access to authorised administrators and use encrypted connections and protected technical configuration. Keep your signed order-status link private because it grants access to your order. The contact form accepts no attachments or room photos. Do not email card details, passwords or sensitive photos. Voluntarily supplied photos are used only to answer your question or complaint and retained no longer than needed for that purpose.

Your rights

You may request access, correction, deletion, restriction or portability and object to processing based on legitimate interests. Contact business@oever.art. We request only necessary information to verify identity, rather than an unnecessary identity-document copy. We normally respond within one month and explain any lawful extension. Statutory retention may restrict erasure. You may complain to the Dutch Data Protection Authority. See our cookie policy. Important changes are recorded here.