Privacy policy
Privacy Policy
Last updated: [26 April, 2026]
Overview
Euchelan ("we," "us," "the studio") is the creative studio of Albert Timothy, operating at euchelan.com. This Privacy Policy explains what personal information we collect when you visit our website, place an order, or contact us — and how we use, store, and protect it.
This policy is written to comply with the Protection of Personal Information Act, 2013 (POPIA) of South Africa, and where applicable, the General Data Protection Regulation (GDPR) for buyers in the European Union and United Kingdom.
By using euchelan.com, you confirm that you have read and understood this policy.
1. Who We Are (The Responsible Party)
For the purposes of POPIA and GDPR, the responsible party / data controller is:
Euchelan The creative studio of Albert Timothy
South Africa Contact: [bert@euchelan.com]
If you have any questions about this policy or how your data is handled, write to us at the address above.
2. What Information We Collect
We collect personal information only where it is necessary to operate the studio, fulfil orders, and communicate with buyers and subscribers. Specifically:
Information you provide directly:
- Name and surname
- Email address
- Shipping and billing address
- Phone number (where required by the courier)
- Payment details (processed by our payment provider — see Section 4)
- Any messages, enquiries, or commission briefs you send us
Information collected automatically when you visit the site:
- IP address and approximate location
- Browser type, device type, and operating system
- Pages viewed, time spent on the site, and referring website
- Cookies and similar technologies (see Section 5)
Information from third parties:
- Order and payment confirmations from our payment processor
- Delivery and tracking updates from couriers
- Engagement data from our email marketing provider (opens, clicks, unsubscribes)
We do not knowingly collect personal information from anyone under the age of 18.
3. Why We Collect It (Lawful Basis)
We process your information for the following purposes:
| Purpose | Lawful basis |
|---|---|
| Processing and fulfilling your order | Performance of a contract |
| Communicating about your order, delivery, or enquiry | Performance of a contract / legitimate interest |
| Sending newsletters and marketing emails | Your consent (you may withdraw at any time) |
| Operating and improving the website | Legitimate interest |
| Preventing fraud and securing transactions | Legitimate interest / legal obligation |
| Complying with tax, accounting, and legal requirements | Legal obligation |
We do not sell your personal information to anyone, ever.
4. Who We Share Your Information With
We share your information only with the third parties necessary to run the studio. These include:
- Shopify Inc. — our e-commerce platform, which hosts the website, processes orders, and stores customer data on secure servers. Shopify's privacy practices are governed by its own privacy policy.
- Payment processors (Shopify Payments, PayPal, or equivalent) — who handle card and payment data directly. Euchelan does not see, store, or process raw card details.
- Courier and shipping partners — to whom we provide your name, delivery address, and phone number for the sole purpose of delivering your order.
- Email marketing platform (e.g. Shopify Email, Klaviyo, or Mailchimp) — which stores your email address and engagement data when you subscribe to our newsletter.
- Analytics providers (where used) — to understand how the site is used and improve it. See Section 5.
- Professional advisors — accountants, lawyers, or auditors, where legally required.
- Legal authorities — where compelled by law, court order, or to protect our legal rights.
We require all third parties to handle your information securely and in line with applicable privacy law.
5. Cookies and Tracking
Euchelan.com uses cookies — small text files stored on your device — to operate the site and improve your experience. Specifically:
- Essential cookies (set by Shopify) — required for the cart, checkout, and account functions to work. These cannot be disabled if you wish to use the site.
- Analytics cookies — to understand site traffic and usage patterns. These are anonymised where possible.
- Marketing cookies — to measure the effectiveness of our marketing and, where applicable, show relevant content on other platforms.
You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the site (including checkout) from working.
If a cookie consent banner is displayed, you can adjust your preferences at any time.
6. Email Marketing
If you subscribe to our newsletter or opt in to marketing emails at checkout, we will send you occasional emails about new work, exhibitions, studio updates, and offers from Euchelan.
You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any marketing email, or by emailing [bert@euchelan.com]. Unsubscribing from marketing does not affect transactional emails (order confirmations, shipping updates, etc.), which we are obliged to send.
7. How Long We Keep Your Information
We retain your information only as long as necessary for the purposes set out in this policy:
- Order and customer records — retained for a minimum of 5 years after your last order, in line with South African tax and accounting requirements.
- Newsletter subscribers — retained until you unsubscribe.
- General enquiries — retained for up to 2 years, then deleted.
- Analytics data — retained per the provider's standard retention period (typically 14–26 months).
After these periods, your information is securely deleted or anonymised.
8. How We Protect Your Information
Your information is stored on Shopify's secure infrastructure, which uses industry-standard encryption (SSL/TLS) for all data in transit and at rest. Payment data is handled by PCI-DSS compliant processors and never stored on Euchelan's systems.
Despite these safeguards, no online service can guarantee absolute security. If a data breach occurs that affects your information, we will notify you and the Information Regulator (South Africa) within the timeframes required by law.
9. International Transfers
Because Shopify and several of our service providers are based outside South Africa (primarily in the United States, Canada, and the European Union), your personal information may be transferred to, stored, and processed in those countries. These transfers are made under appropriate safeguards in line with POPIA Section 72 and, where applicable, GDPR Article 46.
By using euchelan.com, you consent to these international transfers as a necessary part of the service.
10. Your Rights
Under POPIA (and GDPR where applicable), you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct any inaccurate information.
- Deletion — request that we delete your information, subject to our legal obligations to retain certain records.
- Objection — object to certain types of processing, including direct marketing.
- Withdrawal of consent — withdraw any consent you have given (e.g. to receive marketing).
- Data portability (GDPR only) — request your data in a portable format.
- Lodge a complaint — with the Information Regulator of South Africa (inforeg@justice.gov.za) or your local data protection authority.
To exercise any of these rights, email [bert@euchelan.com]. We will respond within 30 days.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of the page indicates when the most recent changes were made. Material changes will be communicated via email to active subscribers and customers where reasonable.
We recommend reviewing this policy periodically.
12. Contact
For any privacy-related question, request, or complaint:
Euchelan Studio
Email: [bert@euchelan.com] Web: euchelan.com
We treat privacy seriously and respond to every legitimate request personally.