Last updated: September 2026

At EtnoArt, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains what personal data we collect, why we process it, how we use and share it, how long we retain it, and what rights you may have under applicable data-protection law, including the General Data Protection Regulation (GDPR) where applicable.

1. Who We Are

The data controller responsible for the processing described in this Privacy Policy is:

Legal business name: NOVA LANČ DOOEL Veles (НОВА ЛАНЧ ДООЕЛ Велес)
Trading name: EtnoArt
Address: Ul. Arhiepiskop Mihail No. 15, Veles, North Macedonia
Tax ID: 4004018516985
Email: support@etnoartstudio.com
Website: https://etnoartstudio.com

Where required under applicable EU data-protection law, details of our representative in the European Union will be provided here:

EU Representative: [TO BE ADDED IF REQUIRED]

2. Personal Data We Collect

When you visit our website, place an order, upload a photograph, contact us or otherwise interact with EtnoArt, we may collect personal data including:

• First and last name
• Email address
• Telephone number
• Billing and shipping address
• Country and delivery information
• Order and transaction information
• Uploaded photographs
• Names, dates, dedications and other personalization details submitted with an order
• Communications you send to us
• Payment status and payment-related transaction information
• VAT, tax and customs information where required
• IP address
• Browser and device information
• Website usage and interaction information
• Cookie and similar technology identifiers, where applicable

We do not normally receive or store your complete payment-card number when payments are processed by third-party payment providers.

3. Why We Process Personal Data and Our Legal Bases

We process personal data only where we have a lawful basis to do so.

Performance of a Contract

We process information necessary to:

• Process and fulfil your order
• Prepare and create your personalized artwork
• Process personalization instructions
• Communicate with you about your order
• Arrange shipping and delivery
• Process payments, refunds and order-related support

This processing is necessary to perform our contract with you or to take steps requested by you before entering into a contract.

Legal Obligations

We may process and retain information where necessary to comply with legal, accounting, tax, VAT, customs, IOSS or regulatory obligations.

Legitimate Interests

Where permitted by law, we may process limited personal data for legitimate business interests including:

• Protecting and securing our website
• Preventing fraud and misuse
• Maintaining records of customer communications
• Improving our services and website
• Establishing, exercising or defending legal claims

We rely on legitimate interests only where those interests are not overridden by your rights and freedoms.

Consent

Where required, we rely on your consent for activities such as:

• Non-essential analytics cookies
• Advertising or marketing technologies
• Optional marketing communications
• Use of customer photographs or finished artwork for advertising or social-media purposes

You may withdraw your consent at any time.

4. Uploaded Photographs and Personalized Content

Photographs uploaded to EtnoArt are processed for the purpose of preparing and creating the personalized artwork you order.

Photographs may contain personal data relating to you or other individuals. By submitting a photograph, you confirm that you have the necessary rights or permission to provide it to us for the requested purpose.

We do not sell customer photographs.

We do not use customer photographs or completed personalized artworks for advertising, social media or promotional purposes without permission.

Uploaded photographs are retained only for as long as reasonably necessary to prepare, fulfil and support the relevant order.

Once they are no longer required, photographs are deleted from active systems or securely removed in accordance with our normal data-retention and backup processes.

Copies may temporarily remain in secure backups or order-related communications until those systems are overwritten or deleted according to their normal retention cycles.

5. Payments

Payments are processed through third-party payment providers made available at checkout.

Depending on availability, these providers may include Stripe, PayPal, digital-wallet providers and other payment partners displayed during checkout.

Payment providers may receive information such as your:

• Name
• Billing details
• Email address
• IP address
• Order amount
• Transaction information
• Payment-method information

Payment providers process this information according to their own legal obligations and privacy policies.

EtnoArt does not normally receive or store complete payment-card details.

Stripe, for example, receives transaction and customer information when Stripe Checkout is used to process a payment. Stripe

6. VAT, IOSS and Customs Compliance

For eligible orders shipped to customers in the European Union, certain order, transaction, delivery, VAT and customs information may be provided to EAS Project and/or its appointed IOSS intermediary for the purpose of VAT calculation, IOSS reporting, tax compliance and customs processing.

EAS states that it processes transaction and fiscal information, including order and shipment information and VAT/customs-related data, as an independent controller for relevant compliance services. EAS

Only information reasonably necessary for these purposes is provided.

Our IOSS identification number is not intended for public disclosure and is shared only where operationally required for tax and customs processing.

7. Shipping and Delivery Providers

To fulfil your order, we may share necessary information with postal, courier, logistics and customs providers.

This may include:

• Your name
• Delivery address
• Telephone number
• Email address
• Shipment details
• Order value and customs information where required

The specific carrier may vary depending on the destination and shipping arrangement.

8. Website Hosting, Email and Technical Providers

We may use third-party service providers to operate and maintain our website and business systems, including:

• Website hosting providers
• WordPress and WooCommerce-related services
• Email and SMTP providers
• Security and anti-fraud services
• Backup and website-maintenance providers
• Technical support providers

These providers may process limited personal data where necessary to provide their services.

Where a provider processes personal data on our behalf, we seek to use providers offering appropriate data-protection and security safeguards.

9. Analytics, Advertising and Cookies

Our website uses necessary technologies required for core functionality, security, shopping-cart functionality, checkout and user preferences.

We may also use optional analytics or advertising technologies, including services such as Google Analytics and Meta technologies, where enabled.

Non-essential analytics and advertising technologies are activated only in accordance with your cookie choices where consent is required.

You can accept, reject or manage optional cookies through our cookie-consent settings and may change or withdraw your choice later.

Rejecting optional cookies should not prevent you from accessing the core functionality of the website.

Browser settings may also allow you to block or delete cookies, although blocking necessary cookies may affect website functionality.

EU guidance distinguishes necessary website functionality from optional analytics/third-party cookies and supports giving users a genuine accept/refuse choice. European Commission

More detailed information about individual cookies, providers, purposes and durations may be provided in our Cookie Policy or cookie-settings panel.

10. Sharing of Personal Data

We do not sell or rent your personal data.

We may share personal data only where reasonably necessary with categories of recipients including:

• Payment providers
• Shipping and logistics providers
• VAT, IOSS and customs-compliance providers
• Website hosting and technical providers
• Email providers
• Analytics and advertising providers where consent has been given
• Professional advisers where necessary
• Public authorities where disclosure is required by law

Some third-party providers may act as processors on our behalf, while others may act as independent controllers under their own legal obligations.

11. International Data Transfers

Because EtnoArt is based in North Macedonia and uses international service providers, personal data may be processed in countries outside the European Economic Area.

Where applicable law requires safeguards for an international transfer, we take reasonable steps to ensure that an appropriate transfer mechanism is used, such as an adequacy decision, Standard Contractual Clauses or another legally permitted safeguard.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

Different information may be retained for different periods.

For example:

• Order and transaction records may be retained for the period required by accounting, tax and legal obligations.
• Customer-service communications may be retained while necessary to support the order or resolve disputes.
• Uploaded photographs are retained only as long as necessary for artwork preparation, fulfilment and reasonable order support, subject to backup cycles.
• Cookie and analytics data are retained according to the settings and retention periods of the relevant services.
• Data needed to establish, exercise or defend legal claims may be retained for the relevant limitation period.

When information is no longer required, it is deleted, anonymised or securely isolated until deletion through normal backup processes.

13. Data Security

We use reasonable technical and organisational safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include access controls, secure connections, software updates, security tools and restricted access to customer information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Your Data-Protection Rights

Where the GDPR or similar applicable data-protection law applies, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of personal data in certain circumstances
• Request restriction of processing
• Object to certain processing
• Receive certain data in a portable format
• Withdraw consent where processing is based on consent
• Object at any time to direct marketing
• Lodge a complaint with a competent data-protection supervisory authority

These rights are subject to the conditions and exceptions provided by applicable law. European Commission

To exercise your rights, contact:

support@etnoartstudio.com

We may request information reasonably necessary to verify your identity before responding to a request.

15. Automated Decision-Making

EtnoArt does not use solely automated decision-making that produces legal effects or similarly significant effects on customers.

Payment providers, fraud-prevention services or other third parties may use automated systems as part of their own services, subject to their respective privacy notices and legal obligations.

16. Complaints

If you believe your personal data has been processed unlawfully, please contact us first so that we can investigate the matter.

Where the GDPR applies, you also have the right to lodge a complaint with a competent data-protection supervisory authority, including an authority in the EU/EEA country where you live or work or where you believe an infringement occurred.

17. Third-Party Websites

Our website may contain links to third-party websites or services.

Their processing of personal data is governed by their own privacy policies and is not controlled by EtnoArt.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, service providers or legal requirements.

The latest version will be published on this page together with the updated revision date.

19. Contact

For questions concerning this Privacy Policy or your personal data, contact:

EtnoArt
Operated by: NOVA LANČ DOOEL Veles
Address: Ul. Arhiepiskop Mihail No. 15, Veles, North Macedonia
Tax ID: 4004018516985
Email: support@etnoartstudio.com
Website: https://etnoartstudio.com