Last updated: 15 July 2026

This Privacy Policy explains how Daniel Arendzen Art&Prints (SSM: 202603180356 / CA0424123-K) (“we”, “us”, “our”) collects, uses, stores and protects information when you visit danielarendzen.com or purchase a piece of art from us. We are a sole proprietorship registered in Malaysia and we handle personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA).

We are a small, independent studio. We collect only what we need to run the shop, ship your art, and — if you choose — keep you updated about new work. We do not sell your data.

1. Who we are

Daniel Arendzen Art&Prints (SSM: 202603180356 / CA0424123-K)

Address: Batu Gajah, Perak, Malaysia

Email: reachme@danielarendzen.com

Daniel, the representative of the business owner, is the sole employed person behind this business and personally handles data requests.

2. What information we collect

We collect information in three ways: when you make a purchase, when you subscribe to the email list, and automatically through analytics when you browse the site.

  • Order information: name, shipping address, billing address, email address, phone number, and payment confirmation (payment card details are processed directly by our payment gateway and are never stored on our servers).
  • Email list information: your email address, and optionally your name, if you subscribe.
  • Automatic information: pages visited, time on site, general location (country/city level), device and browser type, and how you arrived at the site, collected via Google Analytics.
  • Correspondence: anything you send us directly by email, WhatsApp, or the contact form.

3. How we use your information

  • To process, pack, and ship your order, and to communicate with you about it.
  • To provide the Certificate of Authenticity and any provenance documentation tied to your piece.
  • To send you the email updates you signed up for — new work, background information, and behind-the-scenes content, at most once a week.
  • To understand, in general terms, how people use the site, so we can improve it.
  • To meet our legal obligations, including tax and accounting records.

We do not use your data for anything beyond these purposes, and we do not sell, rent, or trade your personal data to third parties.

4. Legal basis for processing

We process order and shipping information because it is necessary to fulfil a contract with you (your purchase). We process email list data on the basis of your consent, given when you subscribe — you can withdraw that consent at any time. We process analytics data on the basis of our legitimate interest in understanding and improving the site, balanced against your privacy.

5. Who we share information with

We share the minimum necessary information with the following categories of service providers, solely to run the business:

  • Payment processors, to complete your transaction securely.
  • Shipping carriers (currently DHL), to deliver your order — this includes your name, address, and phone number.
  • Website hosting and e-commerce infrastructure (WooCommerce/WordPress), which stores order and account data on our behalf.
  • Google Analytics, for aggregated website usage data.
  • Email service provider, to manage and send the email list.

We do not share your information with anyone else, and we never sell customer data.

6. International transfers

We are based in Malaysia and ship internationally. If you are located outside Malaysia, your information will necessarily be transferred to and processed in Malaysia, and may pass through servers operated by our service providers (such as Google Analytics or our hosting provider) in other countries. By using the site or placing an order, you consent to this transfer.

7. Cookies

The site uses cookies for core shop functionality (such as remembering what is in your cart) and for Google Analytics. You can control or disable cookies through your browser settings, though some parts of the site — particularly checkout — may not work correctly without them.

8. Data retention

We keep order and transaction records for as long as required by Malaysian tax and accounting law (generally seven years). Email list data is kept until you unsubscribe. You can ask us to delete data that we are not legally required to retain at any time. You have the right to request data deletion, which will be honoured except where the law prevents deletion.

9. Data security

We take reasonable technical and organisational measures to protect your information, including secure hosting and never storing full payment card details ourselves. No online system is completely secure, and we cannot guarantee absolute security, but we treat your data with care.

10. Your rights

Under the PDPA, and as a matter of general good practice regardless of where you are located, you have the right to:

  • Ask what personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data, subject to our legal retention obligations.
  • Withdraw consent to marketing emails at any time, by using the unsubscribe link or emailing us directly.
  • Object to or limit how we use your data.

To exercise any of these rights, email reachme@danielarendzen.com. Daniel reads and responds to these requests personally.

11. Children’s privacy

This site is not directed at children, and we do not knowingly collect personal data from anyone under 18.

12. Changes to this policy

We may update this Privacy Policy from time to time, for example as the business grows or as our tools change. The “last updated” date at the top will reflect the most recent revision. Continued use of the site after a change means you accept the updated policy.

13. Contact

Questions about this policy or how your data is handled can be sent to reachme@danielarendzen.com, or by post to Batu Gajah, Perak, Malaysia.