Legal

Privacy Policy

Last updated 23 September 2026

This policy describes, in plain language, what JTP Skulptur's website actually does with personal information today. It has been drafted directly from the site's implementation — it is not a legally reviewed document. Passages marked [Confirm] need input from the site owner, and ideally a qualified advisor, before this page should be relied on as a final policy.

JTP Skulptur ("we", "us") is a studio and online gallery for the sculpture of Jens Wollinger. This policy explains what information we collect through this website, why, and how it's handled.

Who we are

[Confirm] Registered business name, legal entity, business registration number, and registered address, if applicable. You can reach us at jtp.skulptur@gmail.com.

Information we collect

We collect the following information, only where you provide it directly:

Contact form — your name, email address, subject, and message, when you write to us.
Newsletter — your email address, when you subscribe. We use a confirmation email (double opt-in) before adding you to the list, and every send includes an unsubscribe link.
Orders — your email address at checkout, and, once payment succeeds, the name and shipping address you give to our payment processor, Stripe. We never see or store your full card details — see "Payment processing" below.
Shopping cart — the items in your cart are kept only in your own browser (local storage) and are not sent to our servers until you check out.
Studio and partner accounts — staff and studio-partner ("vendor") logins are authenticated by email and password. This applies only to internal accounts, not to visitors or customers.

We do not use advertising or marketing tracking. With your consent only, we use Google Analytics 4 to understand, in aggregate, how the website is used (pages viewed, approximate location, device and browser). See our Cookies Policy for exactly what is set and how to change your choice.

How we use this information

To respond to messages sent through the contact form.
To process, confirm, and fulfil orders, and to email you order confirmations.
To send newsletter updates you've explicitly opted into, and to honour unsubscribe requests.
To notify the relevant studio partner when an order includes a piece they need to ship.
To understand, in aggregate, how the website is used — only if you accept analytics cookies. The legal basis is your consent, which you can withdraw at any time via “Cookie settings” in the footer.

Payment processing

All payments are handled by Stripe, on Stripe's own secure, hosted checkout page. We never receive or store your card number, expiry date, or CVC. Stripe passes us your order total, email, and — once payment succeeds — the shipping name and address you entered, so we can fulfil your order.

Who we share information with

Studio partners ("vendors") — if your order includes a piece from an independent maker featured on the site, that partner can see the order's shipping name, address, and item details, solely to ship your item. They do not see your email address or any payment information.
Service providers — we use Supabase (database and file storage), Stripe (payments), Resend (transactional email delivery), and Cloudflare (website hosting) to run this site, and — only if you accept analytics cookies — Google (Google Analytics 4). Each processes data on our behalf under their own security and privacy terms. [Confirm] hosting/storage region and data-processing agreements for each provider.
We do not sell personal information, and we do not share it for advertising purposes.

How long we keep information

[Confirm] Specific retention periods have not yet been defined. Order, contact, and newsletter records are currently kept indefinitely unless you ask us to delete them.

Your rights

[Confirm] Applicable jurisdiction(s) — e.g. whether GDPR (EU/EEA customers) or other regional privacy law applies. Subject to that, you typically have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain uses of it. To exercise any of these, email us at jtp.skulptur@gmail.com.

Cookies

This website uses strictly necessary cookies and local storage and, only if you accept, Google Analytics cookies. We use no advertising or marketing cookies. You can change your choice at any time via “Cookie settings” in the footer. Full detail is in ourCookies Policy.

Children

This website is not directed at children, and we do not knowingly collect personal information from children. [Confirm] any specific age threshold you'd like stated here.

Changes to this policy

If this policy changes, we'll update the "last updated" date at the top of this page.

Contact

Questions about this policy or your information can be sent to jtp.skulptur@gmail.com.