Privacy Policy
Last updated: July 7, 2026
At Unchained, we create Christian canvas wall art that we hope brings peace and encouragement into your home. We believe the trust you place in us when you share your details deserves the same care we put into every canvas. This Privacy Policy explains what personal data we collect when you visit our store, place an order, or contact us, why we collect it, and the rights you hold under the General Data Protection Regulation (GDPR). Unchained is operated from the Netherlands, and this policy is written with EU data protection law at its heart.
What Personal Data We Collect
Data you give us directly
- Order data: your name, shipping address, billing address, email address, phone number, the items you purchase, and confirmation that your payment was completed. We never see or store your full card number; payment details are handled by our payment providers.
- Contact data: your name, email address, and the content of any message you send us through our contact page, for example a question about a piece, a request under our 30 day money back guarantee, or a claim under our lifetime print quality warranty.
- Marketing preferences: your email address if you choose to subscribe to updates from us.
Data collected automatically
When you browse our store, analytics cookies and similar technologies record certain technical information: the pages you view, the products you look at or add to your cart, your approximate location based on IP address, and details about your device and browser. This helps us understand how visitors use the store so we can improve it. See the Cookies section below for more detail and for how to manage these.
Why We Use Your Data and Our Legal Bases
Under the GDPR, we may only process your personal data when we have a valid legal basis. Here is how that works in practice:
| Purpose | Data used | Legal basis |
|---|---|---|
| Producing and delivering your order. Every canvas is made to order, so we need your details to print and ship your piece and to keep you informed about its progress. | Order data | Performance of a contract, Art. 6(1)(b) GDPR |
| Honoring our 30 day money back guarantee and lifetime warranty on print quality, including processing refunds and replacements. | Order data, contact data | Performance of a contract, Art. 6(1)(b) GDPR |
| Answering your questions and providing customer support. | Contact data | Legitimate interest in serving you well, Art. 6(1)(f) GDPR |
| Keeping financial records and meeting Dutch tax and accounting obligations. | Order data | Legal obligation, Art. 6(1)(c) GDPR |
| Sending email updates and offers, only if you have subscribed. | Email address, marketing preferences | Consent, Art. 6(1)(a) GDPR |
| Understanding how the store is used and improving it. | Analytics data | Consent for non essential cookies, Art. 6(1)(a) GDPR, and legitimate interest in improving our store, Art. 6(1)(f) GDPR |
| Detecting and preventing fraud and keeping the store secure. | Order data, analytics data | Legitimate interest in a safe store, Art. 6(1)(f) GDPR |
Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interest, you have the right to object, as described under Your Rights below.
Who We Share Your Data With
We never sell your personal data. We share it only with service providers (processors) who help us run the store, and only the data they need for their task:
- Our e-commerce platform: our store runs on Shopify, which hosts the site and securely stores order and account information on our behalf.
- Payment providers: they process your payment securely and confirm to us that it succeeded.
- Shipping carriers and our production partners: they receive your name and delivery address so your canvas can be printed, packed, and delivered. Shipping is free worldwide, and international delivery means your address may be shared with carriers in the destination country.
- Email service: the provider that sends order confirmations, shipping updates, and, if you subscribed, our newsletter.
- Analytics providers: they help us measure how the store performs, using the cookie data described below.
Each of these partners is bound by a data processing agreement and may use your data only on our instructions. We may also disclose data where the law requires it, for example to tax authorities or in response to a valid legal request.
International Transfers
Some of our service providers operate outside the European Economic Area. Whenever your data leaves the EEA, we rely on safeguards recognized under the GDPR, such as an adequacy decision by the European Commission or the Commission's Standard Contractual Clauses, so your data keeps the same level of protection wherever it travels.
How Long We Keep Your Data
- Order records: kept for 7 years, as required by Dutch tax and bookkeeping law.
- Warranty records: because our print quality warranty is lifetime, we keep a basic record of what you ordered so we can honor it whenever you need us to.
- Contact messages: kept for up to 2 years after your question is resolved, so we have context if you reach out again.
- Marketing data: kept until you unsubscribe, after which your address is removed from our mailing list.
- Analytics data: kept in aggregated or shortened form and deleted or anonymized within the retention window of our analytics tools.
Your Rights Under the GDPR
As an EU customer, you are in control of your personal data. You have the right to:
- Access: ask us for a copy of the personal data we hold about you and how we use it.
- Correction: ask us to fix data that is inaccurate or incomplete.
- Deletion: ask us to erase your data where we no longer have a legal reason to keep it.
- Objection: object to processing based on our legitimate interests, and object at any time to direct marketing.
- Restriction: ask us to pause processing of your data in certain situations.
- Portability: receive the data you gave us in a common machine readable format, or have it sent to another provider.
- Withdraw consent: withdraw any consent you have given, at any time, without affecting processing that already took place.
To exercise any of these rights, reach out through our contact page. We may ask you to confirm your identity before acting on a request, and we will respond within one month as the GDPR requires. Exercising your rights is always free of charge.
If you believe we have not handled your data properly, we would be grateful for the chance to make it right first. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your own EU country.
Cookies
Cookies are small files stored on your device. Our store uses:
- Essential cookies: required for the store to function, for example keeping your cart together and completing checkout. These cannot be switched off.
- Analytics cookies: help us see which pages and artworks resonate with visitors so we can improve the store. These are used with your consent.
- Marketing cookies: where used, these help us show relevant offers, and they are only set with your consent.
You can manage or withdraw your cookie choices through your browser settings at any time. Blocking cookies may limit some features, such as keeping items in your cart. For details on the cookies set by our platform, see Shopify's cookie policy.
Security
Our store runs over an encrypted connection, and payment details are processed only by certified payment providers. We limit access to personal data to what is strictly needed to serve you. No system on the internet can promise absolute security, but we work diligently to protect what you entrust to us.
Children
Our store is not directed at children, and we do not knowingly collect personal data from them. If you believe a child has shared personal data with us, please let us know through our contact page and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time, for example when our practices or the law change. The current version is always published on this page, together with the date of the latest update.
Contact and Data Controller
Questions about this policy, or a privacy request? We are glad to help. Please reach us through our contact page and we will get back to you promptly.
Data controller: Unchained, Groenestraat 51 bs, Utrecht, the Netherlands.