Privacy Policy
Last updated: 10 August 2026.
Who we are
Gallery Helen She, Via Migliorati 10, 65014 Loreto Aprutino (PE), Italy, is the data controller for this website. For any privacy question or request, contact info@helenshe.art.
What personal data we collect
- Inquiry form (on artwork pages): the name, email, optional phone number and message you send us, together with which artwork you asked about.
- Purchases via PayPal: when you buy a piece, PayPal collects your name, shipping address, email and payment details directly. We receive your name, email, shipping address and the PayPal order ID for that order, so we can fulfil and ship it. We never see or store your card or PayPal account details.
- Server logs: like most websites, our hosting server automatically records standard technical data (IP address, browser type, pages visited, timestamps) for security and troubleshooting.
- Website analytics (Umami, self-hosted on our own server): aggregated, anonymised statistics such as which pages are visited, referring site, approximate country/region, and browser/device type. Umami does not use cookies and does not store your IP address or any other identifier that could be used to single you out individually — we only see anonymous, aggregated numbers, never a profile of you as an individual visitor.
The Instagram feed on our homepage shows Gallery Helen She's own public Instagram posts via the Instagram API — it does not collect any data about you as a visitor. We do not use advertising or cross-site tracking cookies anywhere on this site.
Why we use your data
- To reply to your inquiry and, if you buy a piece, to process and fulfil the order.
- To keep the site secure and working correctly (server logs).
- To understand, in aggregate, how the site is used and improve it (analytics).
- To meet our own legal, accounting and tax record-keeping obligations.
Who we share it with
- PayPal, as an independent data controller for payment processing — see PayPal's own privacy policy for how it handles your payment data.
- Our hosting provider, which stores the site and its data on our server.
We do not sell your personal data to anyone.
How long we keep it
We keep inquiry and order records for as long as needed to answer your inquiry, fulfil your order and meet our legal accounting obligations, and delete or anonymise them afterwards.
International transfers
PayPal may process payment data outside the EU/EEA (including in the United States) under its own safeguards. We do not otherwise transfer your personal data outside the EU/EEA.
Cookies
This site does not set analytics or advertising cookies. Our analytics (Umami) is cookieless by design — it doesn't need your consent to run because it never sets a cookie or stores anything that identifies you individually. The PayPal checkout button, when used, may set its own cookies required for fraud prevention and payment processing — these are set by PayPal, not by us. If we ever add a tool that does use cookies (e.g. advertising or cross-site tracking), we will ask for your consent with a cookie banner before doing so and update this page.
Your rights
Under the GDPR, you have the right to access the personal data we hold about you, correct it, ask us to delete it, restrict or object to its processing, and receive a copy in a portable format. To exercise any of these rights, email info@helenshe.art. You can also lodge a complaint with the Italian data protection authority, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
Children
This site is not directed at children and we do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy as the site changes. The "last updated" date at the top of this page reflects the latest version.