Last updated: 20 October 2026

This Privacy Policy explains how Daniel Arendzen Art & Prints (SSM: 202603180356 / CA0424123-K) (“we”, “us”, “our”) collects, uses, stores and protects information when you visit danielarendzen.com or purchase a piece of art from us. We are a sole proprietorship registered in Malaysia and we handle personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA).

We are a small, independent studio. We collect only what we need to run the shop, ship your art, and — if you choose — keep you updated about new work. We do not sell your data.

1. Who we are
Daniel Arendzen Art & Prints (SSM: 202603180356 / CA0424123-K)

Address: Batu Gajah, Perak, Malaysia

Email: reachme@danielarendzen.com

Daniel, the representative of the business owner, is the sole employed person behind this business and personally handles data requests.

2. What we save, and why
We only save what is needed to complete your order, deliver your piece, stay in touch with you if you ask us to, and keep the records the law requires.

When you place an order:

– Name, email address and phone number: to confirm your order, send you updates about it, and give the courier a way to reach you on delivery.
– Shipping address: to deliver your piece.
– Billing address: needed to process your payment, and kept in our accounting records.
– Order details (the piece, price, date and payment confirmation): to complete the order, to issue the Certificate of Authenticity, and for our tax and accounting records.
– Payment card or account details: we never see or save these. They go directly to the payment provider you choose at checkout (see section 5).

When you subscribe to the email list
– Your email address, and optionally your name: to send you the updates you signed up for.

When you browse the site

– Pages visited, time on site, general location (country/city level), device and browser type, and how you arrived at the site, collected via Google Analytics: to understand, in general terms, how the site is used.

When you contact us
– Anything you send us by email, WhatsApp or the contact form: to answer you, and, where it relates to an order, as part of that order’s record.

3. How we use your information
– To process, pack, and ship your order, and to communicate with you about it.
– To provide the Certificate of Authenticity and any provenance documentation tied to your piece.
– To send you the email updates you signed up for — new work, background information, and behind-the-scenes content, at most once a week.
– To understand, in general terms, how people use the site, so we can improve it.
– To meet our legal obligations, including tax and accounting records.

We do not use your data for anything beyond these purposes, and we do not sell, rent, or trade your personal data to third parties.

4. Legal basis for processing
We process order and shipping information because it is necessary to fulfil a contract with you (your purchase). We process email list data on the basis of your consent, given when you subscribe — you can withdraw that consent at any time. We process analytics data on the basis of our legitimate interest in understanding and improving the site, balanced against your privacy.

5. Who we share information with
We share the minimum necessary information with the following categories of service providers, solely to run the business:

– Payment providers, to complete your payment (see below).
– Shipping carriers (currently POS Laju within Malaysia and DHL internationally), to deliver your order — this includes your name, address, and phone number.
– Website hosting and e-commerce infrastructure (WooCommerce/WordPress), which stores order and account data on our behalf.
– Google Analytics, for aggregated website usage data.
– Email service provider, to manage and send the email list.
– Payment providers. Your payment is handled by the payment provider you choose at checkout. It processes your card or account details itself, under its own privacy policy and terms. We have no control over how a payment provider collects, uses or stores your data; for that, please read the privacy policy of the provider you use. We receive only the confirmation that your payment went through and the details needed to match it to your order.

We do not share your information with anyone else, and we never sell customer data.

6. International transfers
We are based in Malaysia and ship internationally. If you are located outside Malaysia, your information will necessarily be transferred to and processed in Malaysia, and may pass through servers operated by our service providers (such as Google Analytics or our hosting provider) in other countries. By using the site or placing an order, you consent to this transfer.

7. Cookies
The site uses cookies for core shop functionality (such as remembering what is in your cart) and for Google Analytics. You can control or disable cookies through your browser settings, though some parts of the site — particularly checkout — may not work correctly without them.

8. Data retention
We keep order and transaction records for as long as required by Malaysian tax and accounting law (generally seven years). Email list data is kept until you unsubscribe. You can ask us to delete data that we are not legally required to retain at any time. You have the right to request data deletion, which will be honoured except where the law prevents deletion.

9. Data security
We take reasonable technical and organisational measures to protect your information, including secure hosting and never storing full payment card details ourselves. No online system is completely secure, and we cannot guarantee absolute security, but we treat your data with care.

10. Your rights
Under the PDPA, and as a matter of general good practice regardless of where you are located, you have the right to:

– Ask what personal data we hold about you.
– Ask us to correct inaccurate data.
– Ask us to delete your data, subject to our legal retention obligations.
– Withdraw consent to marketing emails at any time, by using the unsubscribe link or emailing us directly.
– Object to or limit how we use your data.
– To exercise any of these rights, email reachme@danielarendzen.com. Daniel reads and responds to these requests personally.

11. Children’s privacy
This site is not directed at children, and we do not knowingly collect personal data from anyone under 18.

12. Changes to this policy
We may update this Privacy Policy from time to time, for example as the business grows or as our tools change. The “last updated” date at the top will reflect the most recent revision. Continued use of the site after a change means you accept the updated policy.

13. Contact
Questions about this policy or how your data is handled can be sent to reachme@danielarendzen.com.