Gallery information · Updated 13 November 2026

Privacy notice

Birgitte Lund is responsible for the personal information collected through this gallery.

Information we use

When you enter delivery details or place an order, we use your name, email, delivery address, selected artworks, order amounts and payment references. Enquiries include the contact details and message you provide. We also keep limited technical records to protect the service.

We use this information to respond to you, confirm your order total, process purchases, arrange delivery, handle returns and keep required business records. Preparing an order total and answering enquiries are steps you request before a contract; order processing, delivery and returns use performance of a contract; required accounting uses legal obligations; fraud prevention, security and defending claims use legitimate interests. We need your name, email, delivery address, artwork selection and privacy acknowledgement to prepare your order. An enquiry needs an email address and message so we can reply. Optional fields are marked in the form. Acknowledging this notice does not subscribe you to marketing.

Service providers and payments

The gallery uses Netlify for hosting, Neon for its database and Resend for transactional emails. Stripe processes new payments for Atelier Birgitte Lund. These providers receive the information necessary for their services. Birgitte uses order and payment information to fulfil orders and provide customer support. Payments made through the gallery’s previous payment account remain with the provider that originally processed them. Stripe handles card information directly; the gallery does not store full card numbers or security codes. Carriers receive the delivery details necessary to transport an order.

Hosting, email and payment providers may process information outside the European Economic Area, including the United States. Their published data-processing and transfer terms provide safeguards such as European Commission Standard Contractual Clauses, and adequacy arrangements where applicable. Contact Birgitte for details or a copy of the relevant safeguards for your data. See the Resend data-processing addendum and Stripe data-processing agreement. See Stripe's privacy notice, Netlify's privacy notice, Neon's privacy notice and Resend's privacy notice for their information.

Storage and retention

Unpaid order requests and resolved enquiry records are reviewed for removal after 12 months without activity. Order and payment records are retained for applicable accounting and consumer-claim periods; records subject to a dispute or legal hold are kept until it is resolved. Security records are reviewed after 90 days unless needed to investigate an incident. Birgitte reviews encrypted operational backups for replacement or deletion after 30 days; a backup required for an active recovery or legal hold may be kept longer. Records are reviewed for deletion rather than deleted automatically. Provider-held payment, delivery and email records follow the provider’s own retention obligations as well. Contact Birgitte about a particular record or deletion request.

Your browser remembers your saved artworks, basket and delivery country. The private Studio uses a secure session cookie for authentication. This gallery does not use advertising or analytics cookies. Stripe may use its own technologies on its payment pages.

Your choices and rights

Contact Birgitte to request access, correction or deletion of your information, or to ask about restriction, portability or objection where these rights apply. Some records must be retained to meet legal obligations. You may complain to the Danish Data Protection Agency (Datatilsynet) or your relevant local supervisory authority.

Keep private order and order-status links secure. Please do not send card numbers, security codes or unnecessary sensitive information in an enquiry.