Ing'ink Privacy Policy

Effective Date: November 1st, 2025

1. General Provisions and Data Controller

This Privacy Policy explains how Olga Krokhicheva (the "Data Controller," "we," or "us"), operating as an Artiste-auteur (Micro BNC) under French law, collects, uses, and protects your personal data when you use the ing'ink website (https://ingink.com).

1.2. Data Controller Information

We process your data in compliance with the GDPR (Regulation (EU) 2016/679) and French national data protection laws.

2. Data We Collect and Why (Legal Basis)

We collect personal data from Collectors and Artists based on the necessity for the Performance of a Contract and our Legitimate Interests.

2.1. Data Collected from Collectors

• Account Data: Email, Hashed Password, Name, Country (Purpose: account management).
• Payment Data: Stripe Customer ID, Subscription/Transaction ID (Purpose: processing subscription fees).
• Behavioural Data: Preferences (style, genre) (Purpose: improving recommendations).

2.2. Data Collected from Artists

• Account Data: Email, Hashed Password, Full Name (Purpose: account management).
• Public Profile Data: Country, City, Portfolio, Images, Links, Announcements (Purpose: promoting works. Data is made publicly available.).
• Payment Data: Stripe Customer ID, Subscription/Transaction ID (Purpose: processing platform subscription fees).

2.3. Automatically Collected Data

IP Address, device data, cookies (Purpose: security and analytics).

2.4. Contact Form Data

Name, Email, Subject, Message (Purpose: responding to user inquiries). This data is stored in our database and may be used to send responses via email.

3. Data Sharing and International Transfers

We share your data with third-party Data Processors, including Stripe, Supabase, Google Workspace, Netlify, Hostinger, MailerLite, ImageKit, and Google Analytics.

International Transfers (Outside EU): We ensure the lawfulness of transfers outside the EEA by utilizing Standard Contractual Clauses (SCCs) approved by the European Commission.

4. Data Retention

• Financial Data (Stripe IDs): Retained for 10 years from the relevant fiscal year end to comply with French tax and commercial law.
• Account Data: Retained as long as the account is active. Upon deletion, data is erased or anonymised within 30 days.
• Contact Messages: Retained for up to 2 years or until resolved, then archived or deleted.
• Technical Logs (IP addresses): Retained for up to 1 year.

5. Your GDPR Rights

You have the right to access, rectify, erase (right to be forgotten), restrict processing, port your data, and object to processing. Contact admin@ingink.com to exercise these rights.

Right to Lodge a Complaint: You may file a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

6. Cookies

For full details on the cookies we use and how to manage your consent, please refer to our separate Cookie Policy.