Privacy Policy
Last updated: August 2026
This Privacy Policy explains how I collect, use, share and protect personal information when you visit timhupkes.com, contact me, subscribe to marketing communications or place an order with Tim Hupkes Art.
1. Who Is Responsible for Your Data?
Tim Hupkes Art is responsible for the processing of personal information described in this Privacy Policy.
Business name: Tim Hupkes Art
Chamber of Commerce (KvK): 24459267
Address: Fuikhoren 13, 3225 BN Hellevoetsluis, The Netherlands
Email: tim@timhupkes.com
2. Information I Collect
Depending on how you use the website, I may collect or receive information including:
• your name;
• billing and shipping address;
• email address and telephone number;
• order and transaction information;
• products you purchase, view or add to your cart;
• communications you send to me;
• marketing preferences;
• IP address;
• browser, device and approximate location information;
• website usage and interaction data;
• cookie and similar technology identifiers.
Payment information is processed through the payment services available at checkout. I do not personally receive or store your complete payment card details.
3. How I Use Your Information
I may process personal information to:
• process, fulfil and deliver orders;
• process payments, refunds and returns;
• communicate with you about your order;
• respond to questions and customer service requests;
• prevent fraud and protect the security of the website;
• comply with tax, accounting and other legal obligations;
• operate, maintain and improve the website;
• understand how visitors use the website;
• send marketing communications where you have subscribed or where otherwise permitted by law;
• measure the effectiveness of marketing and advertising;
• provide relevant advertising where advertising technologies have been enabled and you have provided any consent required by law.
4. Legal Bases for Processing
Where the General Data Protection Regulation (GDPR) or similar legislation applies, I process personal information on one or more of the following legal bases:
Performance of a contract: where processing is necessary to process and fulfil your order or provide a service you requested.
Legal obligation: where information must be processed or retained to comply with applicable law, including tax and accounting requirements.
Legitimate interests: where necessary to operate and protect my business and website, improve my services, prevent fraud or provide customer service, provided those interests are not overridden by your rights.
Consent: where consent is required, particularly for certain marketing communications, analytics, advertising cookies and similar technologies. You may withdraw your consent at any time.
5. Shopify and Payments
My online store is hosted by Shopify. Shopify processes personal information necessary to provide the ecommerce platform, operate the checkout and support transactions.
Depending on the payment method you choose, payment information may be processed by Shopify Payments and/or other payment providers available during checkout, such as Shop Pay, Visa, Mastercard, American Express, Maestro, UnionPay, Apple Pay, Google Pay or Klarna.
Payment providers may process information independently where necessary for payment processing, fraud prevention, regulatory compliance and other purposes described in their own privacy policies.
I do not store your full credit or debit card number.
6. Print Production and Fulfilment
I use Printumo to produce and fulfil certain art print orders.
When necessary to fulfil your order, relevant information may be shared with Printumo, including your name, delivery address, contact details, order information and the products you ordered.
Printumo and relevant production, logistics and shipping partners use this information as necessary to produce, package and deliver your order.
This processing is necessary to perform my contract with you.
7. Email Marketing and Klaviyo
I use Klaviyo to manage email marketing and customer communications.
If you subscribe to marketing emails or interact with my store, Klaviyo may process information such as your name, email address, order history, website activity, IP address, cookie identifiers and interactions with emails.
This information may be used, where legally permitted, to:
• send newsletters and promotional emails;
• personalise marketing communications;
• understand engagement with emails and the website;
• send relevant automated communications, such as abandoned-cart or browse-related messages where permitted.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in those emails.
Unsubscribing from marketing does not prevent me from sending necessary transactional communications relating to an order.
8. Google Analytics
I use Google Analytics 4 (GA4) to understand how visitors use my website.
Google Analytics may process information such as website interactions, session information, approximate geographic location, browser and device information and cookie or similar identifiers.
Where required by applicable law, analytics cookies and similar technologies will only be used after you have provided consent.
Analytics information helps me understand website performance and improve the website and customer experience.
9. Advertising and Remarketing
I may use online advertising services in the future, including Google Ads, and may enable advertising or conversion-measurement technologies provided by platforms such as Google, Meta, Pinterest or other advertising providers.
If these services are enabled, they may use cookies, pixels or similar technologies to measure advertising performance, understand conversions and, where permitted, show more relevant advertising.
Advertising and remarketing technologies requiring consent will not be activated for a visitor before the required consent has been obtained.
You can change or withdraw your cookie choices as described in the Cookies section below.
10. Cookies and Similar Technologies
This website uses cookies and similar technologies.
Some cookies are necessary for the website, checkout, security and other essential functionality. Other cookies may be used for analytics, personalisation or advertising.
Where required by applicable law, non-essential cookies are only used after you have made the relevant choice through the website's cookie consent mechanism.
Depending on the technologies enabled on the website, cookies and similar technologies may be placed or accessed by Shopify, Google, Klaviyo and other service providers described in this Privacy Policy.
You can manage your choices through the cookie settings available on the website and, where applicable, through your browser settings.
11. Google Fonts
The website may use fonts provided by Google Fonts.
Depending on how these fonts are technically implemented, your browser may connect to Google servers in order to retrieve font files. Where this occurs, technical information such as your IP address may be transmitted to Google.
Where possible, fonts may instead be served locally or through the website infrastructure, in which case a direct connection to Google for font delivery is not required.
12. Who I Share Information With
I only share personal information where reasonably necessary to operate the business, fulfil orders, provide requested services or comply with legal obligations.
Recipients may include:
• Shopify and payment providers;
• Printumo and production or fulfilment partners;
• postal, courier and logistics providers;
• Klaviyo;
• Google, where relevant services are enabled;
• advertising platforms where advertising services are enabled;
• professional advisers, accountants or authorities where legally necessary.
I do not sell personal information in the ordinary meaning of selling customer lists or contact details for money.
13. International Data Transfers
Some service providers may process personal information outside the Netherlands or European Economic Area.
Where GDPR requirements apply to an international transfer, I rely on the safeguards provided by the relevant service provider and applicable law, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, or Standard Contractual Clauses.
14. Data Retention
I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including fulfilling orders, providing customer service and complying with legal, tax and accounting obligations.
Different categories of information may therefore be retained for different periods.
Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer reasonably necessary, subject to any information that must be retained to record your opt-out preference.
15. Your Privacy Rights
Depending on where you live and the law that applies, you may have rights relating to your personal information, including the right to:
• request access to your personal information;
• request correction of inaccurate information;
• request deletion of your information;
• restrict or object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent;
• object to certain direct marketing;
• lodge a complaint with the relevant data protection authority.
To exercise a privacy right, contact me at tim@timhupkes.com
I may need to verify your identity before completing certain requests.
16. Security
I take reasonable organisational and technical measures to protect personal information.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
17. Children's Privacy
My website and products are not directed at children, and I do not knowingly collect personal information from children for marketing purposes.
If you believe a child has provided personal information inappropriately, please contact me.
18. Third-Party Websites
The website may contain links to websites or services operated by third parties.
I am not responsible for the privacy practices of independent third-party websites. Their own privacy policies apply when you use those services.
19. Changes to This Privacy Policy
I may update this Privacy Policy when my services, technologies, legal obligations or business practices change.
The current version will be published on this website with the date of the latest update.
20. Contact
For questions about this Privacy Policy or the processing of your personal information, contact:
Tim Hupkes Art
Fuikhoren 13
3225 BN Hellevoetsluis
The Netherlands
Email: tim@timhupkes.com
Chamber of Commerce (KvK): 24459267