Privacy Policy
Last updated: 28 August 2026
This Privacy Policy explains how Sarah Kostick (“I”, “me” or “my”) collects and uses personal information when you visit sarahkostickart.com or contact me by email.
I am committed to respecting your privacy and handling personal information in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) and Spanish data protection legislation.
1. Who is responsible for your personal data?Sarah Kostick
2. What personal information do I collect?The information I collect depends on how you interact with my website.
When you contact me by email:
If you contact me at contact@sarahkostickart.com, I will receive the information you choose to provide, which may include your name, email address and the contents of your message.
Please avoid sending sensitive or confidential personal information by email unless it is necessary for your enquiry.
When you visit my website:
My website is hosted by Squarespace. Like most websites, it uses certain technical cookies and similar technologies that are necessary for the website to function, maintain security and provide its basic services.
I have disabled Squarespace Analytics and do not use the website to collect analytics about visitors or to monitor how individual visitors use the site.
The website also contains an embedded video hosted by Vimeo. When the video is loaded or played, Vimeo may receive technical information relating to your visit and the device or browser used to access the video. Vimeo’s own privacy and cookie policies apply to its processing of this information.
3. Why do I use your information?I may use personal information:
to respond to enquiries and requests;
to communicate with you about my services;
to maintain and operate my website;
to maintain the security and functionality of the website; and
to comply with applicable legal obligations.
I do not sell your personal information or use it for behavioural advertising.
4. Legal basis for processingWhere you contact me with an enquiry, I process the information you provide because it is necessary to respond to your request and, where relevant, to take steps at your request before entering into a professional relationship.
Where information is processed because I am legally required to do so, the legal basis is compliance with a legal obligation.
For non-essential cookies, where applicable, the legal basis is your consent. You can withdraw or change your cookie choices at any time through the cookie settings on the website.
5. Who may receive your information?I do not sell or rent your personal information.
Your information may be processed by service providers that I use to operate my website, email and other business services. These providers process information as necessary to provide their services and may have their own privacy policies.
The website is hosted by Squarespace and includes an embedded Vimeo video. Depending on how these services operate, information may be processed by or transferred to third parties, including outside the European Economic Area. Where required by law, appropriate safeguards are used for such transfers.
6. How long do I keep your information?I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to respond to enquiries, maintain business records and comply with legal, accounting or other applicable obligations.
The length of time information is retained will therefore depend on the nature of the information and the reason it was collected.
7. Your rightsUnder applicable data protection law, you may have the right to:
request access to the personal information I hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information where applicable;
request restriction of processing in certain circumstances;
object to certain types of processing;
request portability of information where applicable; and
withdraw consent where processing is based on your consent.
To exercise your rights, please contact me at contact@sarahkostickart.com.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe that your personal data has been processed unlawfully.
8. Third party websitesMy website may contain links to websites operated by other organisations. I am not responsible for the privacy practices or content of those websites. I recommend reviewing their privacy policies before providing them with personal information.
9. Changes to this privacy policyI may update this Privacy Policy from time to time to reflect changes to my website, services or legal obligations. The latest version will always be published on this page, with the date of the most recent update shown at the top.
10. ContactIf you have any questions about this Privacy Policy or how your personal information is handled, please contact: