Privacy policy

Last updated: 12 August 2026

Magda Malak, trading as Magda Malak Art, respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information I collect when you visit magdamalakart.com, purchase an artwork, join the Collector Circle, make an enquiry or otherwise communicate with me. It also explains how that information is used, stored and protected.

For UK data-protection purposes, Magda Malak trading as Magda Malak Art is the data controller.

CONTACT DETAILS

Magda Malak Art
37 Haylands
Portland
Dorset
DT5 2LA
United Kingdom

Email: contact@magdamalakart.com

INFORMATION I COLLECT

Depending on how you interact with Magda Malak Art, I may collect:

  • Your name
  • Your email address and telephone number
  • Your billing and delivery addresses
  • Details relating to your order, payment confirmation and delivery
  • Information you provide when making an enquiry or requesting a commission
  • Your Collector Circle subscription preferences
  • Communications between you and Magda Malak Art
  • Technical information such as your IP address, browser, device type and interaction with the website
  • Cookie and website-usage information, subject to your cookie preferences

Payments are processed securely by Shopify and its payment providers. I do not directly receive or store your complete payment-card details.

HOW I COLLECT YOUR INFORMATION

I collect personal information when you:

  • Purchase an original painting or limited-edition print
  • Request or arrange a commission
  • Join the Collector Circle
  • Complete a contact form or email me
  • Attend an exhibition or art fair and voluntarily provide your details
  • Browse or interact with this website
  • Communicate with me through social media or another platform

I may also receive necessary information from service providers involved in processing payments, operating the website, delivering orders or managing communications.

HOW I USE YOUR INFORMATION

I may use your personal information to:

  • Process and fulfil orders
  • Take and confirm payments
  • Package, insure and deliver artworks
  • Communicate about purchases, commissions, returns or delivery
  • Respond to questions and enquiries
  • Manage Collector Circle subscriptions
  • Send requested studio news, exhibition invitations, new-work announcements and other marketing emails
  • Maintain financial, tax and transaction records
  • Prevent fraud and protect the security of the website
  • Understand and improve how visitors use the website
  • Comply with legal and regulatory obligations
  • Establish, exercise or defend legal claims

LAWFUL BASES

Under UK data-protection law, I rely on one or more of the following lawful bases:

Contract — when your information is needed to process a purchase, deliver an artwork, manage a return or fulfil a commission agreement.

Consent — when you actively choose to join the Collector Circle, accept non-essential cookies or consent to another optional use of your information.

Legitimate interests — when necessary to answer enquiries, maintain customer relationships, improve the website, prevent fraud and operate Magda Malak Art effectively, provided those interests do not override your rights.

Legal obligation — when information must be retained or processed to comply with tax, accounting, consumer-protection or other legal requirements.

COLLECTOR CIRCLE AND MARKETING EMAILS

If you join the Collector Circle, I will use your email address to send studio news, exhibition invitations, previews of new work, collector information and occasional offers.

Joining is voluntary. You may unsubscribe at any time by selecting the unsubscribe link in an email or contacting contact@magdamalakart.com.

Unsubscribing from marketing will not prevent essential messages relating to an order, commission, delivery or other transaction.

I will not add contact or order details to general marketing communications unless you have consented or another lawful marketing basis applies.

COOKIES AND ANALYTICS

This website uses essential cookies required for functions such as navigation, checkout, security and remembering shopping-cart contents.

Subject to your choices, it may also use analytics, preference or marketing cookies to understand website use and improve the experience.

Where consent is required, non-essential cookies should not be placed until you have made your selection through the website’s cookie controls. You can change your preferences through those controls or your browser settings.

Further information about cookies used by Shopify is available at:

https://www.shopify.com/legal/cookies

WHO I SHARE INFORMATION WITH

I only share personal information where it is necessary to operate the business, fulfil your request or comply with the law.

Recipients may include:

  • Shopify, which hosts and operates the online store
  • Payment processors
  • Delivery companies, postal services and specialist fine-art couriers
  • Email and newsletter service providers
  • Website, analytics and technical-service providers
  • Professional advisers such as accountants, insurers or legal advisers
  • Government authorities, regulators or law-enforcement bodies where legally required

These providers receive only the information reasonably necessary to perform their services and process it under their own legal and contractual responsibilities.

I do not sell your personal information.

INTERNATIONAL TRANSFERS

Some service providers, including Shopify and associated technology providers, may process information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards are used where required. These may include adequacy regulations, recognised contractual protections or other lawful transfer mechanisms.

DATA RETENTION

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

As a general guide:

  • Order, payment and accounting records may normally be retained for up to six years to meet legal, tax and accounting requirements.
  • Enquiry and commission correspondence is retained for as long as needed to manage the relationship and resolve any related matter.
  • Collector Circle information is retained until you unsubscribe or ask for it to be removed, although limited suppression information may be retained to ensure you are not contacted again.
  • Technical and cookie information is retained according to the settings of the relevant website or analytics provider.

Information may be retained for longer where necessary to resolve a dispute, establish legal rights or comply with a legal obligation.

DATA SECURITY

Reasonable organisational and technical safeguards are used to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no internet transmission or storage system can be guaranteed to be completely secure. Please avoid sending sensitive payment or identity information through ordinary email or contact forms.

YOUR DATA-PROTECTION RIGHTS

Depending on the circumstances, you may have the right to:

  • Request access to the personal information held about you
  • Ask for inaccurate information to be corrected
  • Request deletion of your information
  • Ask for processing to be restricted
  • Object to processing based on legitimate interests
  • Object to direct marketing at any time
  • Withdraw consent where processing relies on consent
  • Request a portable copy of certain information
  • Make a complaint about how your information is handled

These rights are not absolute and may be subject to legal exceptions.

To exercise a right, email contact@magdamalakart.com. I may need to request reasonable information to confirm your identity before responding.

CHILDREN’S INFORMATION

This website and its services are not directed at children, and I do not knowingly collect personal information from children.

If you believe that a child has supplied personal information, please contact me so that it can be reviewed and deleted where appropriate.

THIRD-PARTY LINKS

The website may contain links to external websites or social-media platforms. Magda Malak Art is not responsible for the privacy practices, security or content of external services. Please review their own privacy notices before providing information.

CHANGES TO THIS POLICY

I may update this Privacy Policy to reflect changes to the website, service providers, business practices or legal requirements.

The revised policy will be published on this page, and the “Last updated” date will be changed accordingly.

COMPLAINTS

Please contact me first if you have any concern about how your personal information has been handled. I will make every reasonable effort to resolve it.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: https://www.ico.org.uk
Telephone: 0303 123 1113