Privacy policy
This site is built around the work — not around collecting more of your data than we need. This policy explains, in plain language, what we hold, why we hold it, and the control you keep over it.
Nova Quinn Studio (“Nova Quinn,” “we,” “us”) is the personal site and print shop of generative artist Nova Quinn. This Privacy Policy covers novaquinn.art, print orders, and any commissions arranged through it. By using the site, you agree to the practices below.
Who we are
Nova Quinn Studio operates as a sole proprietorship based in Los Angeles, California, at 148 Mercer Street, Suite 4B (Studio No. NQ-2024-0198). For the purposes of the EU and UK GDPR, Nova Quinn is the data controller for the personal information described in this policy.
What we collect
We collect what you give us directly — your name and email when you reach out, order or shipping details when you buy a print, and payment information, handled by our payment processor and never stored on our servers. We also collect basic technical data — pages visited, device type, and referrer — through privacy-respecting analytics.
How we use it
We use your information to: Respond to inquiries about commissions, licensing, or available prints. Process payments, send order confirmations, and manage shipping. Send service messages — order updates, commission status, and account or security notices. Send occasional updates about new work or shows, only if you’ve opted in. You can unsubscribe from any such email in one click. Understand how the site is used, so we can improve it and keep it secure.
Your inquiries & commissions
Briefs, references, and images you share when requesting a commission or license are the heart of that conversation, so we treat them carefully. They’re used only to scope and deliver the work you’ve asked for, and are seen only within the studio — never shared outside it. We do not use your brief or reference material in marketing or as examples of our process, without your specific written permission.
Legal bases for processing
Where the GDPR applies, we rely on the following legal bases: Contract — to deliver the prints, commissions, or licenses you’ve requested. Legitimate interests — to secure the site, prevent abuse, and improve how it works, balanced against your rights. Consent — for marketing emails and non-essential cookies, withdrawable at any time. Legal obligation — to keep sales and tax records as the law requires.
Sharing & service providers
We never sell your personal data. We share it only with the service providers (“processors”) that keep the studio running, under contracts that require them to protect it and use it only on our instructions: Payment processing — to take payments for prints and commissions securely. Hosting & email delivery — to run the site and send order and inquiry messages. Shipping & fulfilment — to get physical prints and editions to you. Analytics — in aggregated, privacy-respecting form, to understand how the site is used. We may also disclose information where the law requires it, or to protect the rights and safety of the studio or the public.
Cookies & analytics
We use a small number of cookies. Essential cookies keep the site working; these can’t be switched off. Analytics cookies help us see which works and pages people spend time with, and only run if you accept them in our cookie banner. You can change your choice at any time through the cookie settings link in the footer, or by clearing cookies in your browser. We honor “Global Privacy Control” signals where your browser sends them.
How long we keep it
Order & commission records — for as long as needed to fulfil the work, and 7 years after for tax purposes. Inquiry messages — up to 24 months, so we can follow up on past conversations. Marketing preferences — until you unsubscribe or ask us to erase them. When a retention period ends, we delete or irreversibly anonymize the data.
Your rights
Depending on where you live, you have some or all of the following rights over your personal data: Access — a copy of the data we hold about you. Correction — to fix anything inaccurate or incomplete. Erasure — to have your data deleted, subject to records we must keep by law. Portability — a machine-readable export of data you gave us. Objection & restriction — to object to or limit certain processing. Withdraw consent — at any time, for anything based on consent. To exercise any of these, email privacy@novaquinn.art. We respond within 30 days. If you’re in the EEA or UK and unhappy with our response, you may complain to your local data protection authority. California residents have equivalent rights under the CCPA/CPRA and will not be discriminated against for exercising them.
How we protect it
We use encryption in transit (TLS) and at rest, limited access so only the studio sees your information, and regular reviews of our security practices. No system is perfectly secure, but if a breach ever affects your data, we’ll notify you and the relevant regulator as the law requires.