1. Who we are

This Privacy Policy explains how Olivia Szandra Martin ("we", "us", "the Artist") collects, uses, and protects your personal data when you visit www.liviatiwari.com or make a purchase. We are the data controller responsible for your personal data.

Contact: livia.tiwari@yahoo.com. We are committed to handling your data lawfully, transparently, and in accordance with the EU General Data

Protection Regulation (GDPR) and applicable EU data-protection law.

2. The data we collect

Data you provide: - Name, billing and delivery address, email address, and phone number - Order and purchase history - Commission brief details and any correspondence with us - Information you submit through contact or newsletter forms

Data collected automatically when you visit: - IP address, device and browser type, and general location - Pages viewed and how you interact with the Site - Cookies and similar technologies (see section 6)

We do not collect or store your full payment-card details — these are handled directly by our payment providers.

3. How and why we use your data (legal bases)

We process your data only where we have a lawful basis to do so:
• To fulfil your order and our contract with you — processing payment, arranging delivery, and providing

customer service. (Legal basis: performance of a contract.)

1/3

• To comply with legal obligations — for example, retaining invoices for accounting and tax purposes. (Legal basis: legal obligation.)

• To run and improve the Site, and to protect against fraud — analytics and security. (Legal basis: our legitimate interests.)

• To send you marketing — newsletters and new-work announcements, only where you have signed up. You can unsubscribe at any time. (Legal basis: consent.)

4. Who we share your data with

We do not sell your personal data. We share it only with trusted parties who help us run the studio and fulfil your order:

• Shipping carriers — [BPost / DHL / other] , to deliver your order (they receive your name, address, phone, and email).

• Payment providers — [Apple Pay/ Stripe / PayPal / Klarna] , to process payments securely and prevent fraud.

• Website & email platform — [Squarespace] , which hosts the Site and stores order and contact data on our behalf.

• Analytics / marketing tools — [e.g. Google Analytics, Meta Pixel] , where applicable and subject to your cookie choices.

• Professional advisers and authorities — accountants, or authorities where we are legally required to disclose.

5. International transfers

Some of our providers (for example, our website platform) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected.

6. Cookies & analytics

The Site uses cookies and similar technologies to function correctly, remember your preferences, and understand how the Site is used. Non-essential cookies (such as analytics and marketing) are set only with your consent via our cookie banner. You can adjust or withdraw your choices at any time in your browser settings or through the banner.

7. How long we keep your data

We keep your personal data only as long as necessary for the purpose it was collected, after which it is deleted or anonymised. Order and transaction records are retained for the period required by Belgian accounting and tax law (generally up to 7 years). Marketing data is kept until you unsubscribe.

2/3

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erasure ("the right to be forgotten"), subject to legal retention obligations; • restrict or object to processing;
• data portability — receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at livia.tiwari@yahoo.com You also have the right to lodge a complaint with the EU Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, www.dataprotectionauthority.be) or your local supervisory authority.

9. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No method of transmission over the internet is fully secure, but we work only with reputable providers who maintain strong security standards.

10. Children

The Site and our products are intended for adults. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on this page with its effective date.

12. Contact

Questions about your data or this policy: livia.tiwari@yahoo.com