Last updated: October 19, 2025

​

Hazel Sanabria Art Studio (portraitsbyhazel.com) (“we,” “us,” or “our”) values your privacy. This Policy explains what personal information we collect when you use portraitsbyhazel.com (the “Site”), how we use it, and the choices you have.

 

If you have questions, contact us at info@portraitsbyhazel.com.

​

Who we are

Controller: Hazel Sanabria, San José, Costa Rica
Website: portraitsbyhazel.com
Email: info@portraitsbyhazel.com

​

What we collect

Information you provide directly

• Contact details: name, email address, and (if you commission a portrait) delivery address and phone number (if provided).

• Order details: portrait type (people/pet), size, medium, preferences.

• Reference photos: digital images you email for the commission (and any other images you share).

• Messages: inquiries, feedback, and other communications.

 

Information collected automatically (via Wix and similar tools)

• Usage data: pages visited, clicks, approximate location, device/browser information, session duration.

• Cookies and similar technologies: used for core site functionality, performance, and (if enabled) analytics/marketing. See Cookies below.

 

Payment information

We do not receive or store your full payment card details. Payments are processed by PayPal (and/or another payment provider if added later). They collect and process your payment information under their own privacy policy.

 

How we use your information

We use your information to:

• Provide services: respond to inquiries, create and deliver your commissioned portrait, process orders, and provide customer support.

• Operate and improve the Site: troubleshoot, analyse performance, and enhance user experience.

• Communications: send order updates and respond to your messages. We do not send marketing emails without your consent.

• Legal and security: prevent fraud, protect our rights, comply with legal obligations, and maintain records.

​

Special note about reference photos:
Reference photos may include personal data (e.g., a person’s image). We use them only to create the commissioned artwork and to communicate with you about your order. With your explicit permission, we may display the finished portrait in our portfolio (people/pets section), social media, or marketing materials. You can say no—portfolio use is always optional.

​

Definition of “Child”

For the purposes of commissions and consent on this website, a “child” (or “minor”) means any person under 18 years of age. Commissions featuring a child must be placed by a parent or legal guardian, who provides all required consents and serves as the contracting party. Where local law sets a different age for online consent or data processing, we will follow the higher standard and may request additional verification.

​

Children’s Portraits & Parental Consent

We accept commissions of children’s portraits only from a parent or legal guardian. Reference photos of a child are processed solely to create the commissioned artwork and to manage the order (including communications and delivery).

Public display of the finished artwork (e.g., on our website or social media) is optional and requires separate, explicit guardian consent. We do not post original reference photos.

​​

Retention: Reference photos are stored securely and deleted within 30 days after delivery of the artwork, unless display consent is granted (in which case only the image of the finished artwork may be retained for portfolio use). Guardians may withdraw display consent at any time and request removal of the displayed artwork image.

​

Legal bases (EEA/UK visitors)

If you are in the EEA/UK, we process personal data under these legal bases:

• Contract (Art. 6(1)(b) GDPR): to respond to your inquiry and fulfil a commission.

• Legitimate interests (Art. 6(1)(f)): to run and secure our website, prevent fraud, and improve services.

• Consent (Art. 6(1)(a)): for optional things like portfolio display of your commissioned work or certain cookies/analytics. You may withdraw consent at any time.

 

Sharing your information

We share information only as needed to run our business and fulfil your order:

• Service providers (processors): website hosting (Wix), email service, cloud storage, analytics tools, couriers/shipping.

• Payment processors: PayPal (and any future providers) process your payments directly.

• Legal/Compliance: if required by law or to protect our rights, users, or the public.

 

We do not sell your personal information.

 

International transfers

Our Site is hosted on services that may store or process data in other countries. Where required, we take steps to ensure appropriate safeguards for international transfers (e.g., standard contractual clauses used by our providers).

 

Data retention

• Inquiry/order records: kept as long as necessary to provide services and meet legal/accounting obligations.

• Reference photos: kept only as long as needed to complete the artwork and for a brief backup period (see Children’s Portraits & Parental Consent for minors). If you decline portfolio use, we delete or privately archive them after completion. If you consent to portfolio use, we keep the finished artwork image until you withdraw consent.

• Analytics/cookies: retained according to provider defaults.

 

You may request deletion—see Your rights below.

​

Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.

• Correct inaccurate or incomplete data.

• Delete your data (subject to legal obligations).

• Object to or restrict certain processing.

• Data portability (EEA/UK).

• Withdraw consent at any time (where processing is based on consent).

 

To exercise these rights, email info@portraitsbyhazel.com. We may need to verify your identity. California residents may have additional rights under the CCPA/CPRA.

​​

Children’s privacy

Our services are not directed to children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data directly, contact us to request deletion. (For child portraits, see Children’s Portraits & Parental Consent above.)

​

Security

We use reasonable technical and organisational measures to protect personal information. No method of transmission or storage is 100% secure; please take care when emailing images or personal details.

 

Cookies & similar technologies

Our Site (built on Wix) uses cookies necessary for operation and, if enabled, performance/analytics or marketing cookies.

• You can manage browser cookie settings and (if present) our cookie banner preferences.

• Disabling some cookies may affect site functionality.

 

If we enable analytics (e.g., Wix Analytics or similar), we will configure it to respect consent where required.

 

Third-party links

Our Site may link to external sites (e.g., Instagram, PayPal). We are not responsible for their content or privacy practices. Please review those sites’ policies.

 

Changes to this Policy

We may update this Policy from time to time. The “Last updated” date reflects the most recent version. Significant changes will be noted on the Site.

​

Contact

Questions or requests about this Policy or your data?
Email: info@portraitsbyhazel.com