Privacy policy
Last updated: October 9, 2026
1. Introduction
This website, irina-anis.com, is operated by Irina Anis, the professional name of Irina Anisiforova, an independent artist based in Portugal.
The online store is powered by Shopify, which provides the e-commerce platform used to offer original artworks and related services.
This Privacy Policy explains how personal information is collected, used, stored, and shared when customers visit the website, make purchases, or communicate with the store.
For the purposes of applicable data protection legislation, including the General Data Protection Regulation (GDPR), Irina Anisiforova is the data controller responsible for the personal information processed in connection with the operation of this store.
Shopify and other service providers may also process personal information in accordance with their respective responsibilities and privacy policies.
2. Personal Information Collected
Depending on how visitors interact with the website, the following categories of personal information may be collected or processed:
- Contact information: name, email address, telephone number, billing address, and shipping address.
- Order information: artworks purchased, order history, transaction details, shipping information, and return requests.
- Payment information: payment status and transaction confirmation. Payment method details and payment card information are processed by Shopify Payments or other supported payment providers.
- Account information: account details, preferences, and settings, where customer accounts are available.
- Communications: information provided through emails, contact forms, and customer support enquiries.
- Technical information: IP address, browser type, device information, and other technical identifiers.
- Website usage information: pages visited, artworks viewed, shopping cart activity, and interactions with the website.
The information collected depends on the services used and the choices made by the visitor.
3. Sources of Personal Information
Personal information may be obtained:
- Directly from customers when placing orders, creating accounts, or contacting the store.
- Automatically through the website, including through cookies and similar technologies.
- From Shopify and other service providers involved in payment processing, shipping, analytics, and website operation.
- From advertising and marketing partners, where applicable and permitted by law.
4. How Personal Information Is Used
Personal information may be processed for the following purposes:
Order Processing and Fulfilment
To process purchases, confirm payments, prepare and ship artworks, provide tracking information, and manage returns or refunds.
Customer Communication
To respond to enquiries, provide customer support, and communicate important information about orders.
Website Operation and Improvement
To maintain the website, analyse its performance, remember customer preferences, and improve the shopping experience.
Marketing and Advertising
To send promotional communications where permitted and to display relevant advertisements, including through advertising services that may use information about website activity.
Customers may unsubscribe from marketing emails at any time using the unsubscribe link included in those messages.
Security and Fraud Prevention
To protect transactions, detect suspicious activity, prevent fraud, and maintain website security.
Legal Compliance
To comply with applicable tax, accounting, consumer protection, and other legal obligations.
5. Legal Basis for Processing Personal Information
Where the GDPR applies, personal information is processed on one or more of the following legal bases:
- Performance of a contract: when processing is necessary to fulfil orders, arrange delivery, or provide requested services.
- Legal obligations: when information must be retained or disclosed to comply with applicable laws.
- Legitimate interests: when processing is necessary for website security, fraud prevention, customer support, or business administration, provided these interests do not override individuals' rights and freedoms.
- Consent: where consent is required, including for certain marketing communications, cookies, and advertising technologies.
Where processing is based on consent, that consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Payment Processing
Payments are processed through Shopify Payments or other supported payment providers, depending on the payment method selected at checkout.
Payment providers handle the information necessary to authorise and complete transactions, detect fraud, and comply with applicable financial regulations.
The store does not independently collect or store customers' payment card details.
Further information about Shopify's data processing practices is available in the Shopify Consumer Privacy Policy.
7. Sharing Personal Information
Personal information may be shared with third parties when necessary to operate the store and provide its services.
These may include:
- Shopify: for website hosting, e-commerce functionality, order management, and related services.
- Payment providers: for processing payments and preventing fraudulent transactions.
- Shipping carriers: for delivering artworks and providing tracking information.
- Technology and analytics providers: for website maintenance, performance monitoring, and related services.
- Marketing and advertising partners: where applicable and permitted by law.
- Public authorities: where disclosure is required by applicable law.
Information is shared as necessary for the relevant purposes and in accordance with applicable data protection requirements.
Personal information may also be disclosed where necessary to establish, exercise, or defend legal claims.
8. Shopify and Personalised Services
The online store operates on Shopify's e-commerce platform.
Shopify collects and processes certain personal information to provide, maintain, secure, and improve its services.
Some Shopify features may use information about interactions with this store and other merchants to support personalised shopping experiences, analytics, and advertising.
Where Shopify independently determines the purposes and means of processing, Shopify is responsible for that processing in accordance with applicable data protection laws.
Additional information is available in the Shopify Consumer Privacy Policy.
Privacy rights relating to information processed by Shopify may also be exercised through the Shopify Privacy Portal.
9. Cookies and Tracking Technologies
The website uses cookies and similar technologies to support essential functions, improve performance, analyse visitor activity, and, where applicable, provide personalised advertising.
Some cookies are necessary for the website and checkout process to function correctly.
Other cookies, including those used for analytics or advertising, may require consent depending on applicable law.
Where required, visitors can manage their cookie preferences through the website's consent management tools.
Browser settings may also allow users to restrict or delete cookies, although disabling certain cookies may affect website functionality.
10. Marketing and Advertising Preferences
Personal information may be used to provide information about artworks, exhibitions, new collections, and other relevant updates where permitted by law.
Customers may unsubscribe from promotional emails at any time.
Depending on their location, visitors may also have the right to opt out of certain forms of personalised advertising or data sharing.
Where available, these preferences can be managed through the Data Sharing Opt-Out page.
The website may also recognise Global Privacy Control signals where required by applicable law.
11. International Data Transfers
The store is based in Portugal and serves customers internationally.
Personal information may be processed by Shopify and other service providers located outside Portugal or the European Economic Area.
Where personal information is transferred outside the European Economic Area, appropriate safeguards are applied as required by applicable data protection laws.
These safeguards may include adequacy decisions adopted by the European Commission or approved Standard Contractual Clauses.
12. Data Security
Appropriate technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
The website operates through Shopify, which provides security features for its e-commerce platform and payment infrastructure.
However, no method of electronic transmission or storage can guarantee absolute security.
Customers are encouraged to use secure communication channels when sharing sensitive information.
13. Data Retention
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.
Retention periods depend on the nature of the information and may be determined by:
- The need to process and fulfil orders.
- Applicable tax and accounting obligations.
- Customer service and warranty requirements.
- The prevention of fraud and resolution of disputes.
- Other legal obligations.
When personal information is no longer required, it is deleted or anonymised where appropriate.
14. Your Privacy Rights
Depending on applicable law, individuals may have the following rights regarding their personal information:
- Access: request information about personal data held about them.
- Rectification: request correction of inaccurate or incomplete information.
- Erasure: request deletion of personal information where legally permitted.
- Restriction: request that certain processing activities be restricted.
- Data portability: receive personal information in a structured, commonly used format where applicable.
- Objection: object to certain processing activities, including processing based on legitimate interests.
- Withdrawal of consent: withdraw previously given consent at any time.
These rights may be subject to exceptions established by applicable law.
Requests can be submitted using the contact information provided below.
Identity verification may be required before a request is processed.
Requests will be handled within the time limits established by applicable law.
15. Children's Privacy
The website is not specifically directed at children.
Personal information is not knowingly collected from children in circumstances where parental or guardian consent is required by applicable law and has not been obtained.
Parents or legal guardians who believe that a child has provided personal information may contact the store to request its review or deletion, subject to applicable legal requirements.
16. Third-Party Websites
The website may contain links to external websites, social media platforms, or other third-party services.
These websites operate independently and may have their own privacy policies.
Visitors are encouraged to review the privacy practices of external websites before providing personal information.
17. Complaints
Questions or concerns about the processing of personal information may be submitted using the contact information below.
Individuals also have the right to lodge a complaint with the relevant data protection supervisory authority.
In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).
Website: https://www.cnpd.pt
Individuals residing in other European Economic Area countries may contact their local supervisory authority.
18. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in website functionality, business practices, or applicable legal requirements.
The current version will be published on this website, together with the date of the latest update.
Where required by law, additional notice will be provided.
19. Contact Information
For questions about this Privacy Policy, personal information, or the exercise of data protection rights, please contact:
Irina Anisiforova
Trading as Irina Anis
Email: irina@irina-anis.com
Website: irina-anis.com