This Privacy Policy explains how The Sketch Witch, operated by Leyla Marras Timuroğlu ("we", "us", or "our"), collects, uses, and protects your personal data when you use our website, submit enquiry forms, or purchase digital products through our website, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Name: Leyla Marras Timuroğlu
Business: The Sketch Witch
Status: Independent professional established in Portugal
Email: thesketchwitch222@gmail.com

2. Personal Data We Collect

When you submit an enquiry form

When you contact us through an enquiry form, we may collect the following personal data:

• First name
• Last name
• Email address
• Country
• Details you provide about your event or request (for example, event details, number of guests, hours required, and additional information)

This information is used to respond to your enquiry, communicate with you regarding your request, and assess potential services. Information submitted through forms is received and managed through our email service provider.

When you place an order

When you purchase digital products through our website, we may collect the following personal data:

• First and last name
• Email address
• Country
• Company name (optional)
• Address
• City
• State / Province
• ZIP / Postal code
• Phone number (including country code)

Payment details, such as card information, are processed directly by Stripe and are not stored or accessible by us.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Pre-contractual steps: to respond to your enquiry and communicate with you regarding potential services.
• Contractual necessity: to process your order and deliver your purchase.
• Legal obligation: to comply with applicable tax and accounting requirements.

4. Purpose of Data Processing

Your personal data is used only for the following purposes:

• Responding to your enquiries
• Communicating with you about your event or requested services
• Assessing your request and preparing potential offers or proposals
• Processing and fulfilling your purchase
• Issuing invoices and receipts
• Maintaining records required for accounting and tax compliance

We do not use your personal data for marketing purposes unless you have explicitly opted in.

5. Payment Processing

We use Stripe to process payments securely.

When you make a purchase, your payment information is handled directly by Stripe. Stripe may collect and process personal data necessary to complete the transaction. This processing is subject to Stripe's own Privacy Policy.

6. Data Sharing

We do not sell or rent your personal data.

We may share personal data where necessary to provide our services, comply with legal obligations, or work with trusted service providers who process data on our behalf.

These providers may include:

• Stripe, for secure payment processing
• Pixpa, our website platform provider
• IONOS, our domain provider
• Google (Gmail), our email service provider used to receive and manage communications submitted through our website

These providers process personal data according to their own privacy policies and applicable data protection obligations.

Your data may also be shared with Portuguese tax authorities where required for legal and tax compliance.

7. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are used to ensure compliance with GDPR requirements, such as Standard Contractual Clauses or other lawful transfer mechanisms where applicable.

8. Data Retention

Enquiry data is retained only for as long as reasonably necessary to respond to your enquiry and manage any follow-up communication. Where no business relationship is established, unnecessary enquiry data will be deleted periodically.

Purchase data is retained for the period required to comply with legal and tax obligations under Portuguese law.

9. Cookies

Our website uses cookies and similar technologies to help the website function properly and improve your browsing experience.

When you visit our website, you may see a cookie information banner informing you that cookies are used. You can manage or delete cookies at any time through your browser settings.

If we introduce additional non-essential cookies or similar technologies in the future, this Privacy Policy and our cookie practices will be updated accordingly.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

11. Your Rights Under GDPR

Under the GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate personal data
• Request erasure of your personal data (where applicable)
• Request restriction of processing
• Object to processing
• Receive your personal data in a portable format

To exercise any of these rights, please contact:

thesketchwitch222@gmail.com

We will respond to requests in accordance with applicable data protection laws.

12. Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority.

If you are located in Portugal, you may contact the Comissão Nacional de Proteção de Dados (CNPD).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page together with the revised Last updated date.

If you have any questions about this Privacy Policy, please contact:

thesketchwitch222@gmail.com