Legal
Privacy
Last updated August 2026
The short version
No advertising trackers, no analytics profiling, no data sold to anyone. We collect what we need to send you a painting and answer your email, and nothing else.
What we collect
- When you order: your name, email, delivery address and any delivery note. Stored so we can ship the work and deal with returns.
- When you write to us: your name, email and message.
- In your browser: the contents of your cart, kept in your device's local storage. It never leaves your device until you check out, and clearing your browser data removes it.
We do not run Google Analytics, Meta Pixel or any similar tracker, and we set no advertising cookies.
Payment data
Card and PayPal account details are handled entirely by PayPal and never reach our servers. We receive only the confirmation that a payment succeeded, the payer's name and the email address on the PayPal account. PayPal's own privacy policy governs what they do with your data.
Where it is stored
The site runs on Cloudflare's network. Order and enquiry records are stored in Cloudflare Workers KV. Cloudflare processes requests on our behalf and keeps standard server logs for a short period for security and abuse prevention.
How long we keep it
Order records are kept for seven years, which is what Indonesian tax and accounting rules require. Enquiries that do not become orders are deleted after two years.
Your rights
Emailhello@paintingsfrombali.comand we will send you a copy of everything we hold about you, correct it, or delete it — except where we are legally required to keep an order record for tax. We will reply within 30 days. No ticket system, no forms.