Effective date: May 22, 2026
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
At O_o Art Studio, we are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
This policy applies to all visitors to our website and customers who book our face painting services or commission pet portraits. By using our services, you agree to the collection and use of information in accordance with this policy.
O_o Art Studio is the data controller responsible for your personal data. You can contact us regarding any privacy concerns at:
Email: oostudioart@gmail.com
We collect and process the following categories of personal data:
Contact Information: Name, email address, phone number, and postal address (when necessary for service delivery).
Booking Information: Event date, location, number of participants, specific service requirements, and special requests.
Consent Information: Records of your consents and preferences regarding important safety information, marketing communications, photography, and other data processing activities.
Communication Records: Records of your communications with us, including emails, messages, and phone calls.
Website Usage Data: Information about how you use our website, including IP address, browser type, pages viewed, time spent on our site, general location, and device type (collected through Google Analytics when you consent to analytics tracking). We use Google Analytics to understand visitor behavior on our website.
Photography: With explicit consent, photographs of completed face painting or artwork for portfolio and marketing purposes.
We use cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic.
Google Analytics: We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to collect information about your use of our website, such as pages viewed, time spent on pages, general location (based on IP address), device type, and source of traffic. This information is used to understand visitor behavior and improve our website. IP addresses are anonymized before storage. For more information about how Google processes this data, visit Google's Privacy Policy at https://policies.google.com/privacy
The data collected by Google Analytics is anonymized and does not identify individual users. Google may transfer this information to third parties where required by law or where such third parties process the information on Google's behalf.
You can opt out of Google Analytics tracking by visiting https://tools.google.com/dlpage/gaoptout or by disabling cookies in your browser settings. Opting out will not affect your ability to visit our website.
If you prefer not to accept cookies, you can configure your browser to reject them, though this may limit site functionality.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We process your personal data based on the following legal grounds under GDPR:
Contract Performance (Article 6(1)(b)): To provide face painting services, create commissioned pet portraits, process bookings, and fulfill our contractual obligations.
Legitimate Interest (Article 6(1)(f)): To communicate about your bookings, improve our services, send service-related updates, and maintain customer relationships. Our legitimate interests do not override your fundamental rights and freedoms.
Consent (Article 6(1)(a)): For marketing communications, photography for portfolio use, and analytics tracking (if implemented). You can withdraw consent at any time.
Legal Obligation (Article 6(1)(c)): To comply with tax, accounting, and other legal requirements.
We use your personal data for the following purposes:
Service Delivery: Processing bookings, scheduling appointments, preparing for events, creating commissioned artwork, and providing customer support.
Communication: Sending booking confirmations, appointment reminders, service updates, and responding to your inquiries.
Business Operations: Managing our customer database, processing payments, maintaining records for tax and legal purposes.
Website Functionality: Providing core website features, remembering your preferences during your session, and ensuring website security.
Marketing (with consent): Sending newsletters, promotional offers, and updates about our services. You can opt-out at any time.
Analytics and Improvement: Understanding how our website is used to improve user experience and optimize our services.
We may share your personal data with the following third parties:
Payment Processors: To process payments securely (such as Stripe, PayPal, or Square).
Email Service Providers: To send booking confirmations and communications (such as Mailchimp or similar services).
Calendar and Booking Systems: To manage appointments and scheduling.
Analytics Providers: Google Analytics to understand website usage (only if you consent to analytics tracking and we implement this feature).
Cloud Storage Providers: To securely store and backup your data.
Legal Requirements: When required by law, legal process, or to protect our rights and safety.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. All third-party providers are required to maintain appropriate security measures and use your data only for the specified purposes.
We retain your personal data for the following periods:
Active Customer Data: Contact details and booking history are kept for 3 years after your last interaction with us to maintain customer relationships and provide ongoing support.
Financial Records: Payment and tax-related information is retained for 7 years to comply with legal and accounting requirements.
Marketing Communications: Contact details for marketing purposes are retained until you unsubscribe or withdraw consent.
Website Analytics: Aggregated and anonymized usage data may be retained indefinitely for business analytics purposes (only if analytics are implemented).
Photography: Portfolio images are retained indefinitely unless you request removal.
After these retention periods, we will securely delete or anonymize your personal data unless we have a legal obligation to retain it longer.
As a data subject under GDPR, you have the following rights:
Right of Access: Request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data in certain circumstances.
Right to Restrict Processing: Request that we limit how we use your personal data in certain situations.
Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format.
Right to Object: Object to our processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent as the legal basis for processing.
Right to Complain: Lodge a complaint with your local data protection authority if you believe we have not handled your personal data properly.
To exercise any of your rights or if you have questions about your personal data, please contact us at:
Email: oostudioart@gmail.com
Subject Line: 'Data Protection Request - [Your Request Type]'
We will respond to your request within 30 days (or 3 months for complex requests). We may need to verify your identity before processing your request. All requests are handled free of charge unless they are excessive or repetitive.
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Our security measures include encrypted data transmission, secure data storage, regular security assessments, access controls, and staff training on data protection.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as:
Adequacy Decisions: Transferring data to countries that the European Commission has determined provide adequate protection.
Standard Contractual Clauses: Using European Commission-approved contracts that provide appropriate safeguards for data transfers.
Certification Schemes: Working with providers who participate in recognized certification programs.
You can contact us for more information about the specific safeguards we use for international transfers.
Our face painting services are often provided to children, but our website and direct communications are intended for adults (parents, guardians, or event organizers).
We do not knowingly collect personal data directly from children under 16 without parental consent. Any photographs taken during face painting events require explicit consent from parents or guardians.
If you believe we have inadvertently collected personal data from a child without proper consent, please contact us immediately so we can take appropriate action.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make significant changes, we will notify you by email (if you have provided your email address) or by posting a prominent notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.
The 'Effective Date' at the top of this policy indicates when it was last updated.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Contact: oostudioart@gmail.com
We are committed to resolving any privacy concerns you may have and will respond to all inquiries promptly and professionally.
Contact us if you have questions or need to exercise your privacy rights.