Legal

Privacy Policy

Last updated: June 2026

This privacy policy explains how Komorebi Art ("we", "us") collects, uses and protects your personal data when you visit komorebiartgallery.com or place an order with us. We are committed to handling your data responsibly and in compliance with the General Data Protection Regulation (GDPR).

Data controller: Rajinder Singh, trading as Komorebi Art, Dundalk, County Louth, Ireland.
Contact: hello@komorebiartgallery.com

1. What data we collect

When you place an order, we collect:

• Full name
• Email address
• Shipping address
• Order contents and total

We do not collect or store payment card details. Card processing is handled entirely by Stripe on their secure infrastructure.

When you use the contact or commission form, we collect:

• Your name and email address
• The content of your message

Automatically collected data: We do not use Google Analytics, advertising pixels, or any tracking cookies. Your browser may store small items in localStorage (your cart contents and display theme preference) — these never leave your device and are not personal data.

2. Why we collect it (legal basis)

Purpose	Legal basis
Fulfilling and shipping your order	Contract performance
Sending you an order confirmation email	Contract performance
Responding to your enquiry or commission request	Legitimate interest
Keeping financial records as required by Irish law	Legal obligation

3. Who we share your data with

We share your data only with the third-party services required to operate the site:

• Stripe (stripe.com) — payment processing. Stripe is the data controller for card data. See Stripe's Privacy Policy.
• Supabase (supabase.com) — our database and backend, hosted in the EU. Order and contact data is stored here. See Supabase's Privacy Policy.
• Vercel (vercel.com) — website hosting. Vercel may log basic request metadata (IP, page visited) for security purposes. See Vercel's Privacy Policy.

We do not sell, rent or share your data with any other third parties, and we do not use it for advertising or marketing purposes.

4. How long we keep your data

• Order records — kept for 7 years to comply with Irish Revenue requirements
• Contact / commission messages — kept for up to 2 years, then deleted

5. Your rights under GDPR

As a person in the EU/EEA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal retention obligations)
• Restriction — ask us to stop processing your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email us at hello@komorebiartgallery.com. We will respond within 30 days.

6. Cookies

This website does not use tracking or analytics cookies. We do not display a cookie banner because there is nothing requiring your consent. The only browser storage we use is localStorage for your shopping cart and theme preference — this is stored locally on your device only.

7. Security

We take reasonable technical and organisational measures to protect your data. All data is transmitted over HTTPS. Payment data is processed directly by Stripe and never passes through our servers.

8. Changes to this policy

If we make significant changes to this policy, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

9. Complaints

If you believe we have handled your data improperly, you have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.