1. Data controller
The controller of your personal data is Klaudia Kazuch, running a sole proprietorship under the business name Custom Art Klaudia Kazuch, ul. Opawska 83A/14, 47-400 Racibórz, Poland, NIP (Tax ID): 2220808981, REGON: 545799886 (registered in CEIDG, the Polish Central Register and Information on Economic Activity), under the brand custom-art.pl.
For matters concerning personal data, you can contact me by email: klaudiakazuch@custom-art.pl or by phone / WhatsApp: +48 794 214 366.
2. What data and for what purpose
- Quote form – name, email or phone number, description of your idea, model/size, deadline, budget and any inspiration photos you upload. I use them to prepare a quote and a design and to respond to your inquiry.
- Gift voucher order – the purchaser’s name, email, optionally phone number and shipping address, the recipient’s name and a personal message. I use them to accept the order, send payment details, and issue and deliver the voucher.
- “My work in your hands” gallery – the uploaded photo, name or nickname, optionally a description of the piece and a link to your post. I use them to publish the photo on the website after approval (and possibly share it on my social media).
- Order fulfillment – the data needed to complete and ship the work (full name, delivery address, phone number) and for billing.
- Contact via WhatsApp, Messenger, Instagram or email – the data you provide to me yourself in your message, for the purpose of conducting the conversation.
Providing your data is voluntary, but without it I can’t prepare a quote or fulfill an order.
3. Legal basis
- Art. 6(1) lit. b GDPR – taking steps at your request prior to entering into a contract (quote) and performance of a contract (order fulfillment, voucher),
- Art. 6(1) lit. a GDPR – your consent (e.g., consent checked in a form, publication of a photo of the finished work),
- Art. 6(1) lit. c GDPR – legal obligations, e.g., accounting and tax obligations,
- Art. 6(1) lit. f GDPR – legitimate interest: contacting you about your inquiry, and establishing and pursuing claims.
4. How long I keep data
- inquiries that did not result in an order – up to 12 months from the last contact,
- order-related data – for the duration of the order, and then for the period required by tax law (as a rule, 5 years from the end of the tax year) and the limitation period for claims,
- data processed on the basis of consent – until consent is withdrawn,
- photos submitted to the “My work in your hands” gallery – if published: until consent is withdrawn; if rejected: deleted within 30 days.
5. Who I share data with
Your data may only be shared with entities that help me run my studio: hosting and email providers, courier and postal companies (for shipping), an accounting firm and a bank (for payments). If you write to me via WhatsApp, Messenger or Instagram, your data is also processed by Meta Platforms. I do not sell data or share it for marketing purposes.
6. Transfers outside the EEA
Using Meta messaging services (WhatsApp, Messenger, Instagram) and Google Fonts may involve transferring data (e.g., your IP address) to the USA. This is done on the basis of a European Commission decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
7. Your rights
You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object, and withdraw your consent at any time (without affecting the lawfulness of processing carried out before withdrawal). Just send a message to klaudiakazuch@custom-art.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).
8. Cookies and external resources
This website does not use cookies for tracking or any analytics or advertising tools. To display fonts, it uses the Google Fonts service – when the page loads, your browser connects to Google servers, which may read your IP address. Links to Facebook, Instagram and WhatsApp lead to services that have their own privacy policies.
To protect the forms from spam, a hash of your IP address is stored on the server for a maximum of one hour (to limit the number of submissions). The website does not set cookies for visitors – the only session cookie is used for the administrator to log in to the gallery moderation panel.
9. Photos of my work
I may publish photos of finished work in my portfolio and on social media. If a photo shows your image or personal data, I publish it only with your consent. You can withdraw your consent at any time – I will remove the photo.
I review photos submitted through the “My work in your hands” form before publishing them. By submitting a photo, you confirm that you hold the rights to it and have the consent of the people visible in it. If you want your photo removed from the gallery, email me at klaudiakazuch@custom-art.pl – I will delete it without delay.
10. Changes to this policy
This policy may be updated, e.g., when payment methods change or new website features are added. The current version is always available at this address. Effective as of October 3, 2026.