Privacy Policy

Last updated: September 2026

This Privacy Policy explains how personal data is collected, used and protected when you visit or make a purchase from patrickvandecasteele.com.

Data Controller

The data controller for this website is:
Patrick Vandecasteele
Independent artist – Entrepreneur individuel
7 villa du Chemin de Fer – 92240 – France
contact@patrickvandecasteele.com

For any question regarding your personal data or this Privacy Policy, you may contact me using the email address above.

Personal Data We Collect

Depending on how you use the website, the following information may be collected:

When placing an order

• First and last name
• Billing address
• Shipping address
• Email address
• Telephone number, where required for delivery
• Order and transaction information
• Information necessary for payment, delivery and customs formalities

Payment card details are processed securely by Stripe and are not stored directly by www.patrickvandecasteele.com.

When contacting me

If you use the contact form or contact me by email, I may collect your name, email address and any information you choose to provide in your message.

When subscribing to the newsletter

If you choose to subscribe to the newsletter, your email address and, where applicable, your name will be collected for the purpose of sending news about new works, exhibitions, Limited Editions and Studio Notes.

When visiting the website

Technical information may be collected automatically, including:

• IP address
• Browser and device information
• Pages visited
• Referring website or source
• Approximate geographical information
• Interaction and navigation data

Some of this information may be collected through cookies or similar technologies.

How Your Personal Data Is Used

Personal data may be processed for the following purposes:

• Processing and managing orders
• Processing payments
• Preparing and shipping artworks
• Providing order confirmations and tracking information
• Managing returns and customer enquiries
• Issuing invoices and certificates of authenticity
• Complying with accounting, tax and legal obligations
• Responding to contact requests
• Sending newsletters where consent has been given
• Measuring and improving website performance
• Preventing fraud and maintaining website security
• Measuring advertising performance and, where consent has been given, supporting advertising and remarketing campaigns

Personal data is collected only where necessary for these purposes. The CNIL specifically recommends that e-commerce websites limit information requested from customers to data justified by the service being provided.

Legal Basis for Processing

Depending on the purpose, personal data is processed on one or more of the following legal bases:

Performance of a contract for processing purchases, payments, deliveries, returns and customer service related to an order.

Legal obligations for accounting, invoicing, taxation and other obligations imposed by applicable law.

Consent for newsletters and, where required, analytics, advertising and marketing cookies.

Legitimate interests where necessary for website security, fraud prevention and certain activities required to operate and improve the website, provided these interests do not override your fundamental rights and freedoms.

The applicable legal basis must be communicated to individuals as part of the information provided under the GDPR.

Payment Processing

Online payments are processed securely by Stripe.

When making a payment, certain personal and transaction information is transmitted directly to Stripe for the purpose of processing the transaction, preventing fraud and complying with applicable financial regulations.

www.patrickvandecasteele.com does not store your complete payment card details.

Stripe processes personal data in accordance with its own privacy policies and applicable data protection legislation.

Shipping and Delivery

In order to deliver your purchase, the information necessary for shipping may be shared with transport and logistics providers such as FedEx, DHL, UPS or other carriers selected according to the destination and characteristics of the artwork. Only information necessary for fulfilling and tracking the shipment is shared.

For international deliveries, information may also need to be provided to customs authorities or intermediaries where required by law.

Newsletter and Communications

You will receive newsletters or promotional emails only where you have requested them or where otherwise permitted by applicable law. You may unsubscribe at any time by using the unsubscribe link included in each newsletter or by contacting me directly.

Unsubscribing from marketing communications does not prevent transactional emails necessary for processing an order from being sent.

Analytics

The website may use audience measurement tools to understand how visitors use the site and to improve its content, navigation and performance.

Depending on the technology and configuration used, analytics tools may require your prior consent.

The CNIL provides a limited exemption only for audience-measurement tools meeting strict conditions, including use solely for the publisher’s audience measurement and the production of anonymous statistics without cross-site tracking or reuse by third parties. Where consent is required, analytics tools will not be activated before consent has been obtained.

Advertising and Social Media

The website may use advertising technologies provided by platforms such as Meta, Pinterest or Google/YouTube in connection with advertising campaigns.

These technologies may measure whether an advertisement resulted in a visit or purchase and may, subject to your consent, be used to display advertising relevant to visitors who have previously interacted with the website.

Advertising and social-media tracking technologies requiring consent will not be activated until consent has been given. The CNIL expressly identifies advertising trackers and certain social-network trackers among those requiring prior consent.

Cookies

patrickvandecasteele.com uses cookies and similar technologies for purposes including:

• Operation of the website and WooCommerce shopping cart
• Security
• Remembering user preferences
• Audience measurement
• Advertising measurement and marketing, where applicable

Cookies strictly necessary for the operation of the website and shopping cart may be used without consent. The CNIL specifically identifies cookies used to remember a shopping cart or process billing as examples of trackers that may be strictly necessary. Other cookies and trackers are activated only after obtaining consent where required by law.

For more information and to manage your choices, please refer to the Cookie Policy and the website’s cookie settings.

Who May Receive Your Data

Personal information may be shared, where necessary, with service providers involved in operating the website and fulfilling orders, including:

• Website hosting and technical service providers
• WooCommerce and related e-commerce services
• Stripe for payment processing
• Shipping and logistics providers
• Newsletter provider
• Analytics providers
• Advertising platforms, subject to consent
• Accounting or administrative service providers
• Public authorities where disclosure is legally required

These providers receive only the information necessary for their respective services. Personal data is not sold to third parties.

International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where such transfers occur, appropriate safeguards required by applicable data protection legislation are used, where necessary, to protect personal data.

International shipping may also require personal information to be transmitted to carriers, customs authorities or logistics partners located in the destination country.

Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected and to comply with applicable legal obligations. In particular:

• Order, invoice and accounting information may be retained for the periods required by French tax and accounting law.
• Contact enquiries are retained only as long as reasonably necessary to respond and follow up.
• Newsletter information is retained until you unsubscribe or withdraw your consent, subject to applicable retention requirements.
• Cookie and analytics data is retained according to the periods applicable to the technologies used.

To exercise your rights, contact: Patrick Vandecasteele by e-mail : contact@patrickvandecasteele.com

You may be asked to provide information necessary to verify your identity where appropriate. You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority.

Data Security

Reasonable technical and organisational measures are implemented to protect personal data against unauthorised access, loss, alteration or disclosure. The website uses encrypted HTTPS connections for the transmission of information. However, no online transmission or storage system can guarantee absolute security.

Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes to the website, services, legal requirements or data-processing practices. The date of the latest revision will be indicated at the top of this page.

Contact

For any question regarding this Privacy Policy or the processing of your personal data: Patrick Vandecasteele
7 villa du Chemin de Fer – 92240 Malakoff – France
contact@patrickvandecasteele.com