Privacy Policy

Last updated: 22 August 2026

Who we are

This website is operated by Alina Moroko, a sole trader trading as Mila Moroko (“we”, “us”, “our”), a UK-based business selling original oil paintings. For privacy questions, contact us at milamoroko@gmail.com.

Alina Moroko is the data controller for personal data collected through this website under UK GDPR and the Data Protection Act 2018.

What we collect

Depending on how you use the site, we may collect:

  • Identity and contact details you provide (name, email address, shipping address, phone number) when enquiring or placing an order
  • Order details (artworks selected, shipping destination, and related notes)
  • Technical data such as IP address, browser type, and basic usage logs needed to run and secure the website
  • Preferences stored on your device (for example currency choice or cart contents) via local browser storage

We do not intentionally collect special category data. Please do not include sensitive personal information in free-text messages unless it is necessary for your order.

How we use your data

We use personal data to:

  • Respond to enquiries and commission requests
  • Process and fulfil orders, including shipping and tracking
  • Confirm availability, arrange payment, and send order updates
  • Operate, maintain, and protect the website
  • Meet legal, tax, and accounting obligations

We do not sell your personal data. We do not use your data for automated decision-making that produces legal or similarly significant effects.

Legal bases

We process personal data where one or more of the following applies:

  • Contract — to take steps at your request before a purchase, and to fulfil an order
  • Legitimate interests — to run and secure the site, prevent abuse, and improve our services, where these interests are not overridden by your rights
  • Legal obligation — for example record-keeping for tax and consumer law
  • Consent — where we ask for it (for example optional marketing emails, if offered)

Cookies and local storage

This site uses essential browser storage to remember your cart and display preferences (such as currency). These are required for the shop to function and are not used for advertising tracking.

If we introduce non-essential analytics or marketing cookies in future, we will update this policy and, where required, ask for consent.

Sharing your data

We may share personal data with:

  • Shipping and courier partners, solely to deliver your order
  • Payment providers and banking services, where needed to process or verify payments
  • Professional advisers (for example accountants) and authorities where required by law
  • Hosting and infrastructure providers that process data on our instructions to keep the website online

Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with UK data protection law, using an applicable adequacy regulation, appropriate safeguard, or other permitted transfer mechanism where required.

How long we keep data

We keep order and enquiry records only as long as needed for the purposes above — typically for the life of the customer relationship and then for a period required for tax, accounting, and legal claims (often up to six years in the UK). Technical logs are kept for a shorter operational period unless needed for security investigations.

Your rights

Under UK data protection law, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure in certain circumstances
  • Restrict or object to certain processing
  • Data portability for information you provided to us
  • Withdraw consent where processing is based on consent

To exercise these rights, email milamoroko@gmail.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Children

This website is intended for adults purchasing artworks. We do not knowingly collect personal data from children.

Changes

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Please review it periodically.

Related: our Terms of Sale and Website Use.

Privacy-preserving analytics

We use first-party statistical analytics to understand aggregate website traffic and improve the shop. The analytics system does not use analytics cookies, advertising identifiers, cross-site tracking, session replay or a persistent visitor ID.

To produce aggregate visitor and geographic statistics, the server briefly processes technical information such as the IP address and browser user agent. Raw IP addresses and user-agent strings are not retained in the analytics store. We rely on our legitimate interests in understanding and improving the website, with privacy safeguards designed to minimise the impact on visitors.

Country and approximate city are derived locally on our own server using DB-IP Lite. Small city counts are suppressed in reports to reduce re-identification risk. Analytics data is kept as daily aggregate counters and statistical sketches rather than individual browsing histories.

You can object to this statistical analytics at any time. If you opt out, the preference is stored only on this device so the site can remember your choice; it is not used for advertising or tracking.

Current setting: analytics enabled.

IP Geolocation by DB-IP