Privacy Policy

capstanart.com

Last updated: April 2026

This Privacy Policy explains how Richard Göpel, trading as Capstan Art ("I", "me", "my"), collects, uses, and protects your personal data when you visit capstanart.com or place an order. It applies in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law.

1. Data Controller

The data controller responsible for your personal data is:

Richard Göpel
Erich Köhn Str. 75
04177 Leipzig, Germany

Email: capstan.design@gmail.com
Website: capstanart.com

2. Data We Collect

2.1 When you place an order

To process and fulfil your order, I collect:

• Full name

• Delivery address

• Email address

• Payment information (processed securely by Squarespace Payments, PayPal, or other payment providers — I do not store your full card details)

• Order details and transaction history

2.2 When you browse the website

• Squarespace (my website platform) automatically collects certain technical data, including:

• IP address

• Browser type and version

• Pages visited and time spent

• Referring website

This data is collected via cookies and similar technologies. See Section 7 for more on cookies.

2.3 When you contact me
If you send me a message via the contact form or email, I collect your name, email address, and the content of your message.

3. Legal Basis for Processing
I process your data on the following legal bases under Article 6 GDPR:
Contract performance (Art. 6(1)(b)): Processing your order, arranging shipping, and handling any after-sale queries.
Legal obligation (Art. 6(1)(c)): Retaining transaction records for tax and accounting purposes as required by German law (typically 10 years under §147 AO).
Legitimate interests (Art. 6(1)(f)): Fraud prevention, website security, and improving the shop experience.
Consent (Art. 6(1)(a)): For non-essential cookies, where you have given consent via the cookie banner.

4. How I Use Your Data

• To process and fulfil your order

• To send you order confirmation and shipping updates by email

• To communicate with you about questions or issues with your order

• To comply with legal and tax obligations

• To detect and prevent fraud or abuse
  
  I do not use your data for automated decision-making or profiling. I do not sell your personal data to third parties.
  

5. Third Parties We Share Data With

To operate the shop, I share your data with the following service providers, who act as data processors on my behalf:

Printful (Fulfilment)
Your name, delivery address, and order details are shared with Printful, Inc., my print-on-demand fulfilment partner. Printful prints and ships your order from fulfilment centres in Europe or the USA depending on your location. Printful is bound by a Data Processing Agreement and handles your data in accordance with GDPR. For details, see printful.com/policies/privacy.

Squarespace (Website & Checkout)
My shop is hosted and operated on Squarespace. Squarespace processes data including browsing behaviour, checkout data, and payments on their infrastructure. For details, see squarespace.com/privacy.

Payment Processors
Payments are processed by Squarespace Payments, PayPal, and/or other providers depending on your chosen payment method. I do not have access to your full payment card details. Each provider operates under their own privacy policy and relevant financial regulations.

Shipping Carriers
Your name and delivery address are passed to the relevant shipping carrier (e.g. DHL, UPS, USPS) to deliver your order.

Some of these providers may be located outside the European Economic Area (EEA), particularly in the United States. In such cases, data transfers are covered by Standard Contractual Clauses (SCCs) or other appropriate safeguards as required by GDPR Chapter V.

6. How Long We Keep Your Data

Order data: Retained for 10 years to comply with German tax and commercial law (§147 AO, §257 HGB).
Customer correspondence: Retained for up to 3 years after the last contact, or longer if required for a legal claim.
Website analytics data: Retained according to Squarespace's data retention schedule (typically up to 26 months).

7. Cookies

My website uses cookies — small text files stored on your device. These include:
Essential cookies: Required for the shop to function (e.g. shopping cart, session management). No consent required.
Analytics cookies: Used by Squarespace to understand how visitors use the site. These are only set with your consent.
Payment cookies: Set by PayPal or other payment processors during checkout.
You can manage your cookie preferences via the cookie banner shown on your first visit, or by adjusting your browser settings. Note that disabling certain cookies may affect how the site functions.

8. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:
Right of access (Art. 15): Request a copy of the personal data I hold about you.
Right to rectification (Art. 16): Ask me to correct inaccurate or incomplete data.
Right to erasure (Art. 17): Request deletion of your data, subject to legal retention obligations.
Right to restriction (Art. 18): Ask me to restrict processing in certain circumstances.
Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
Right to object (Art. 21): Object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact me at hello@capstanart.com. I will respond within one month as required by GDPR.

9. Right to Lodge a Complaint

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority in your country of residence. In Germany, the relevant authority is:

Sächsischer Datenschutzbeauftragter (SächsDSB)
Devrientstraße 5, 01067 Dresden
saechsdsb.de

You may also contact the supervisory authority in your own EU member state.

10. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. The updated version will always be available at capstanart.com with the date of the last revision. For significant changes, I will notify you by email if I hold your contact details.

11. Contact

For any questions about this Privacy Policy or how I handle your data, please contact:

Richard Göpel — Capstan Art
Erich Köhn Str. 75, 04177 Leipzig, Germany

Email: capstan.design@gmail.com
Website: capstanart.com