Privacy policy

Last updated: August 2026

This Privacy Policy describes how Zhanna Samsonova (“I,” “me,” or “my”) collects, uses, discloses, and protects personal information when you visit zhannasamsonova.com, purchase artwork or other products, subscribe to marketing communications, contact me, or otherwise interact with my website and services.

This website is operated using Shopify.

By using this website, you acknowledge the practices described in this Privacy Policy.

Where consent is required by applicable law, personal information will be collected, used, or disclosed on the basis of that consent.

Nothing in this Privacy Policy limits any privacy rights that cannot legally be excluded under applicable law.


1. Personal Information I Collect

The personal information collected depends on how you interact with the website.

It may include:

Contact Information

  • name;
  • email address;
  • telephone number;
  • billing address;
  • shipping address; and
  • other contact information you choose to provide.

Order and Transaction Information

When you place an order, information may include:

  • products or artwork purchased;
  • order number;
  • purchase date;
  • billing and shipping details;
  • payment status;
  • shipping and tracking information;
  • returns and refunds;
  • communications relating to your order; and
  • transaction history.

Payment Information

Payments are processed by Shopify and/or third-party payment providers.

I generally do not directly receive or store complete credit card numbers.

Payment providers may collect payment card information, billing information, authentication information, and other data required to process your transaction and prevent fraud.

Account Information

If customer account features are available and you create an account, information may include:

  • name;
  • email address;
  • saved addresses;
  • order history; and
  • account preferences.

Communications

If you contact me through email, a contact form, social media, or another communication channel, I may collect:

  • your name;
  • email address;
  • the contents of your message;
  • attachments or photographs you provide; and
  • other information you voluntarily include.

Marketing Information

If you subscribe to my email list or otherwise consent to marketing, information may include:

  • your email address;
  • subscription and consent status;
  • email opens and clicks where permitted;
  • products or pages viewed;
  • cart activity;
  • purchasing activity; and
  • marketing preferences.

Website and Device Information

When you visit the website, Shopify and approved service providers may automatically collect information such as:

  • IP address;
  • device type;
  • browser type;
  • operating system;
  • approximate location;
  • pages viewed;
  • referring website;
  • interaction with the website;
  • shopping cart activity;
  • session information; and
  • cookie or similar technology identifiers.

The collection of non-essential analytics and advertising information may depend on your privacy preferences and applicable law.


2. How I Collect Personal Information

I may collect personal information:

  • directly from you;
  • automatically when you use the website;
  • through Shopify;
  • through Klaviyo;
  • through Google services;
  • through Meta services;
  • through payment processors;
  • through shipping and fulfillment providers; and
  • from other service providers used to operate the store.

I do not intentionally purchase unrelated personal information lists for use in this business.


3. How I Use Personal Information

I may use personal information for the following purposes.

Processing and Fulfilling Orders

This includes:

  • processing purchases;
  • confirming orders;
  • arranging payment;
  • preparing and shipping artwork;
  • providing tracking information;
  • communicating about an order;
  • handling returns, refunds, damages, and shipping claims; and
  • providing customer support.

Operating and Improving the Website

Information may be used to:

  • provide website functionality;
  • understand how visitors interact with the store;
  • diagnose technical problems;
  • improve navigation and user experience;
  • maintain website security; and
  • understand website and sales performance.

Marketing

Where permitted by law, I may use personal information to:

  • send newsletters;
  • announce new collections;
  • share new original paintings and prints;
  • send abandoned-cart or browse-related reminders;
  • provide information about products you may be interested in;
  • measure advertising effectiveness;
  • create or measure advertising audiences; and
  • personalize marketing communications.

You may unsubscribe from marketing emails at any time using the unsubscribe link included in those emails.

Advertising and Analytics

Subject to applicable consent requirements, information may be used with tools such as Google Analytics, Google Ads, and Meta advertising technologies to:

  • measure website traffic;
  • understand website performance;
  • measure conversions;
  • understand how advertisements perform;
  • create advertising audiences;
  • deliver or personalize advertisements; and
  • improve marketing campaigns.

Fraud Prevention and Security

Personal information may be processed to:

  • detect suspicious activity;
  • prevent fraudulent transactions;
  • protect customers and the website;
  • verify payments; and
  • enforce legal rights.

Legal and Business Obligations

Information may also be used where reasonably necessary to:

  • comply with tax and accounting obligations;
  • maintain business records;
  • respond to lawful requests;
  • resolve disputes;
  • enforce agreements; and
  • establish, exercise, or defend legal claims.


4. Legal Bases for Processing

Depending on where you live and the applicable privacy law, I may rely on different legal bases for processing personal information.

For individuals in the European Economic Area and United Kingdom, these may include:

Contract

Processing may be necessary to enter into or perform a contract with you, including to:

  • process your order;
  • accept payment;
  • deliver products; and
  • handle returns or customer service.

Consent

Consent may be relied upon for activities such as:

  • certain marketing communications;
  • non-essential cookies;
  • analytics technologies; and
  • advertising or tracking technologies,

where consent is required by law.

You may withdraw consent at any time, although withdrawal does not affect processing that was lawful before consent was withdrawn.

Legitimate Interests

Where permitted, I may process information where necessary for legitimate business interests, including:

  • operating and improving the store;
  • preventing fraud;
  • securing the website;
  • understanding business performance; and
  • providing customer service.

I will not rely on legitimate interests where your rights and interests override those interests.

Legal Obligations

Some information may need to be retained or processed to comply with tax, accounting, consumer protection, or other legal obligations.


5. Shopify

My online store is hosted by Shopify.

Shopify provides the e-commerce infrastructure used to operate the website, process orders, support checkout, manage customers, and provide related services.

Shopify may collect and process information about customers and website visitors in accordance with its own privacy practices and its relationship with merchants.

Shopify may also provide privacy tools such as:

  • cookie consent controls;
  • customer privacy settings;
  • data-sharing opt-out mechanisms; and
  • other regional privacy controls.

Your interactions with certain Shopify services may also be subject to Shopify's privacy terms.


6. Klaviyo

I use Klaviyo for email marketing and customer communications.

Depending on your interactions and privacy preferences, Klaviyo may process information such as:

  • email address;
  • subscription status;
  • email engagement;
  • purchasing history;
  • cart activity;
  • products viewed;
  • website activity;
  • marketing preferences; and
  • certain device or browser information.

Klaviyo may also use cookies or similar technologies for onsite tracking where permitted.

For visitors in jurisdictions requiring prior consent, including certain users in the EU, EEA, UK, and Switzerland, Klaviyo tracking may depend on consent settings configured through Shopify.

I may use Klaviyo to send:

  • newsletters;
  • welcome emails;
  • collection launches;
  • abandoned-cart reminders;
  • browse-abandonment messages;
  • post-purchase communications; and
  • other relevant marketing communications where legally permitted.

You may unsubscribe from marketing emails at any time.


7. Google Analytics and Google Advertising

I may use Google Analytics to understand how visitors use the website.

Google Analytics may process information relating to:

  • visits and sessions;
  • pages viewed;
  • traffic sources;
  • device and browser information;
  • approximate geographic location;
  • website interactions; and
  • conversions.

I may also use Google Ads and related Google advertising technologies for advertising, conversion measurement, and remarketing.

Where required by applicable law, non-essential Google analytics and advertising technologies will only be activated after the appropriate consent has been obtained.

Google may process information according to its own privacy terms and settings.


8. Meta Pixel and Meta Advertising

I may use Meta Pixel and related Meta advertising technologies in connection with platforms such as Facebook and Instagram.

Subject to your privacy choices and applicable law, these technologies may be used to:

  • understand whether advertisements lead to website visits or purchases;
  • measure advertising performance;
  • create advertising audiences;
  • provide relevant advertising;
  • understand website interactions; and
  • improve advertising campaigns.

Meta may receive information about website activity and process it according to its own privacy practices.

Where prior consent is legally required, Meta advertising technologies will only be used after that consent has been obtained.


9. Cookies and Similar Technologies

This website uses cookies and similar technologies to operate the online store, remember your preferences, understand how visitors use the website, and, where permitted, measure and personalize marketing.

Cookies are small files or identifiers stored on or accessed from your browser or device.

The website may use the following categories of cookies:

Necessary Cookies

Necessary cookies are required for essential website functions, including:

  • shopping cart functionality;
  • checkout and payment processing;
  • website security and fraud prevention;
  • customer account functions;
  • maintaining website sessions; and
  • remembering your privacy choices.

These cookies may remain active because they are necessary to provide the website and services you request.

Analytics Cookies

Analytics cookies help me understand website traffic, visitor interactions, and website performance.

Where required by applicable law, analytics cookies and similar technologies are used only after you provide the appropriate consent.

Marketing and Advertising Cookies

Marketing and advertising technologies may be used to:

  • measure advertising effectiveness;
  • understand customer journeys;
  • measure conversions;
  • support remarketing; and
  • provide more relevant advertising.

Where prior consent is required by applicable law, these technologies will not be used for these purposes until you provide consent.

Preference Cookies

Preference or functional cookies may help remember choices such as:

  • your country or region;
  • language;
  • currency; and
  • other website preferences.

Where legally required, consent will be requested before non-essential preference cookies are used.

Managing Your Cookie Preferences

Where available, you can choose whether to allow non-essential cookies through the cookie banner or privacy controls provided on the website.

Depending on the options available, you may choose:

  • Accept All;
  • Reject Non-Essential; or
  • Manage Preferences.

You may change or withdraw your consent at any time through the Cookie Preferences or similar privacy controls available on the website.

Changing your preferences applies to future use of cookies and similar technologies and does not affect processing that was lawful before your preferences were changed.

You may also manage or delete cookies through your browser settings.

Please note that disabling necessary cookies may affect essential website functions, including shopping cart, checkout, account, or security features.

Information about the specific services I use, including Shopify, Klaviyo, Google Analytics, Google Ads, and Meta technologies, is provided in the sections above.


10. How I Share Personal Information

I do not sell customer lists as a standalone business activity.

However, personal information may be disclosed to service providers where reasonably necessary to operate the store and provide services.

These providers may include:

  • Shopify;
  • Klaviyo;
  • Google;
  • Meta;
  • payment processors;
  • banks and payment networks;
  • print production and fulfillment partners;
  • shipping carriers and couriers;
  • cloud or technology providers;
  • fraud prevention and security providers;
  • accountants, legal advisers, or other professional advisers; and
  • government or regulatory authorities where required by law.

Service providers receive information only as reasonably necessary for their role, subject to applicable contractual and legal requirements.

Certain privacy laws define some advertising-related transfers broadly as “sharing” or “sale,” even when no money is exchanged for the personal information.

Where applicable, you may have a right to opt out of those activities.


11. International Transfers

Because I sell internationally and use service providers that operate globally, your personal information may be processed, stored, or accessed outside your province, state, or country.

This may include processing in Canada, the United States, or other countries where my service providers operate.

Privacy and data protection laws in those countries may differ from the laws where you live.

Where applicable law requires safeguards for international transfers, I and/or the relevant service provider will rely on appropriate legal mechanisms.


12. Data Retention

I retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • fulfill orders;
  • provide customer support;
  • maintain business and financial records;
  • meet tax and accounting requirements;
  • resolve disputes;
  • prevent fraud; and
  • comply with legal obligations.

Different categories of information may be retained for different periods.

For example, transaction and accounting records may need to be kept longer than marketing information because of legal and tax requirements.

When personal information is no longer reasonably required, it may be deleted, anonymized, or securely disposed of, subject to applicable law.


13. Marketing Communications

If you subscribe to marketing communications, I may send you email messages about:

  • new artwork;
  • new collections;
  • prints;
  • studio updates;
  • exhibitions;
  • special releases;
  • promotions; and
  • other news relating to my art practice.

You can unsubscribe at any time by clicking the unsubscribe link included in marketing emails.

Unsubscribing from marketing does not prevent me from sending transactional communications that are necessary for an order you placed, such as:

  • order confirmations;
  • shipping notifications;
  • customer-service messages; and
  • refund or return communications.


14. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information.

These may include the right to:

  • request access to personal information;
  • request correction of inaccurate information;
  • request deletion of personal information;
  • withdraw consent;
  • object to certain processing;
  • restrict certain processing;
  • request portability of certain information;
  • opt out of certain advertising or data-sharing activities; and
  • complain to an appropriate privacy regulator.

These rights are subject to applicable law and may have exceptions.

I may need to verify your identity before responding to certain privacy requests.

To make a privacy request, please contact me using the information below or use any privacy controls available on the website.


15. European Economic Area and United Kingdom

If you live in the European Economic Area or United Kingdom, you may have additional rights under applicable data protection law.

Depending on the circumstances, these may include rights to:

  • access your personal data;
  • correct inaccurate personal data;
  • request erasure;
  • restrict processing;
  • object to certain processing;
  • withdraw consent;
  • receive certain personal data in a portable format; and
  • lodge a complaint with your local supervisory authority.

Where processing is based on consent, you may withdraw that consent at any time.

Where processing is based on legitimate interests, you may have the right to object based on your particular circumstances.

Nothing in this Privacy Policy restricts rights that cannot legally be waived.


16. Canadian Customers

I handle personal information in accordance with applicable Canadian privacy requirements.

Where consent is required, I aim to provide understandable information about:

  • what personal information is collected;
  • why it is collected;
  • how it is used;
  • who it may be disclosed to; and
  • the potential consequences of the collection, use, or disclosure where relevant.

You may contact me regarding access to or correction of personal information, withdrawal of consent where applicable, or questions about my privacy practices.


17. United States Privacy Rights

Residents of certain U.S. states may have additional rights under state privacy laws.

Depending on your state and whether the applicable legal thresholds are met, these may include rights relating to:

  • access;
  • deletion;
  • correction;
  • portability;
  • targeted advertising;
  • sale or sharing of personal information; and
  • certain profiling activities.

Where required, Shopify or other privacy tools may provide an option such as Your Privacy Choices, Do Not Sell or Share My Personal Information, or a similar data-sharing opt-out mechanism.


18. Children’s Privacy

This website and online store are intended for a general audience and are not designed to knowingly collect personal information from young children for behavioural advertising purposes.

I do not knowingly use personal information from children for targeted or behavioural advertising.

If you believe that a child has provided personal information through the website inappropriately, please contact me so I can review the situation.


19. Security

I use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information processed.

I also rely on established providers such as Shopify and payment processors for many aspects of payment and e-commerce security.

However, no method of electronic storage or internet transmission can be guaranteed to be completely secure.


20. Third-Party Websites

This website may contain links to websites or services operated by third parties.

I am not responsible for the privacy practices of independent third-party websites.

I recommend reviewing the privacy policy of any third-party website you visit.


21. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in:

  • my business;
  • the website;
  • service providers;
  • technology;
  • privacy practices; or
  • legal requirements.

When the policy is materially updated, the Last updated date at the top of this page will be revised.


22. Contact

If you have questions about this Privacy Policy or wish to exercise a privacy right, please contact:

Zhanna Samsonova
Alberta, Canada
Email: info@zhannasamsonova.com
Website: zhannasamsonova.com

Please include “Privacy Request” in the subject line where your request relates to your personal information.

If applicable privacy law gives you the right to complain to a privacy regulator, you may also contact the appropriate authority in your jurisdiction.