This statement explains how Okto Art handles information when you browse this website or get in touch.
Who is responsible?
Okto Art is run by Burcu Koçer Oruç, based in Delft, the Netherlands, who is responsible for the personal data described here. For privacy questions or requests, email [email protected].
When you contact us
The contact form collects your name, email address, message, and the artwork you are asking about, if you selected one. We use these details to answer you and discuss availability, prices, or commissions. The form sends your enquiry to our email inbox through Resend; it does not store submissions in a website database.
For enquiries about a potential purchase or commission, the legal basis is taking steps at your request before entering a contract. For other messages, it is our legitimate interest in responding to people who contact us. We do not add you to a mailing list when you send an enquiry.
The form needs your name, email address, and message so we can handle your enquiry and reply. You can also email us directly. Please avoid including sensitive personal information that is not needed for your enquiry.
Website statistics and cookies
We use Umami Cloud to understand how people use the website and improve it. Statistics include visits, pages viewed, referring websites, browser and operating system, device type, and approximate location. Our legal basis, where these statistics involve personal data, is our legitimate interest in understanding and improving the website.
Umami's tracker does not use cookies. IP addresses are processed to handle requests, derive approximate location, and calculate visitor identifiers; they are not stored as fields in the analytics records. Providers may separately keep IP addresses in operational or security logs.
We do not send contact form contents to Umami or use these statistics for personalised advertising. We have not added visitor account identification or session recordings. The site does not use advertising cookies.
Our Umami configuration respects your browser's Do Not Track preference when available. This stops analytics collection when that signal is enabled, but does not prevent requests needed to load the website or its external resources. You can also contact us to object to processing based on legitimate interests. See Umami's privacy information for more about its service.
Hosting, email, and fonts
We use the following services to operate the website:
- Cloudflare hosts and delivers the website and handles contact form requests. Technical request data, such as your IP address, requested URL, browser information, and request time, may be processed to deliver and protect the site.
- Resend delivers contact form messages to us. It processes your submitted details and email delivery information. Our email provider also processes the resulting correspondence.
- Umami Cloud processes the website statistics described above.
The Cormorant and Inter font files are served from this website alongside its other files, through our hosting provider.
Our legal basis for website delivery and security is our legitimate interest in providing a usable, secure website. We share information with service providers as needed for these purposes, and where disclosure is required by law.
These services may process information outside the European Economic Area, including in the United States. Resend stores customer data in the United States. Applicable safeguards are described in the providers' terms, including the European Commission's Standard Contractual Clauses in the Cloudflare, Resend, and Umami data processing agreements. You can contact us for information about the safeguards relevant to your data.
How long we keep information
- Contact enquiries that do not lead to a sale are kept for up to 12 months after the last contact.
- If correspondence becomes part of a purchase, commission, or legal dispute, we keep the necessary records for the applicable contractual, legal, or claims-handling period.
- Website statistics are retained for six months under our Umami Cloud plan.
- Provider delivery, security, and backup records have separate retention schedules. Resend's standard plans retain email and log data for 30 days, with backups persisting for seven days. This is separate from the copy in our inbox.
Your rights
Depending on the circumstances, you can request access to your personal data, correction, deletion, restriction of processing, or a portable copy. You can object to processing based on legitimate interests, including website analytics.
Email [email protected] to make a request. We will normally respond within one month. If a request is complex and more time is needed, we will let you know within that month. We may need enough information to confirm your identity and locate the relevant data.
You can also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or your local supervisory authority. We do not use your information for decisions made solely by automated processing that have legal or similarly significant effects on you.
Changes to this statement
We update this page when the way we handle information changes. The date above shows when it was last updated.