Privacy Policy

Who we are

Nicky Thomson Art (“we”, “us”) sells original artwork and runs art workshops. For any privacy question or request, contact us at hello@nickythomsonart.com or on WhatsApp at 082 882 4791. Nicky Thomson is our Information Officer.

What we collect

• Account details: your name, email address, phone number, and a password (stored only as a secure, one-way hash — we never see it).
• Order & delivery details: the delivery name, phone number, and address (city and province) you give us so we can send your piece.
• Payment information: your chosen method (EFT or PayFast), a payment reference, and any proof-of-payment image you upload. We do not store your card or full banking details — card payments are handled by PayFast on their own secure systems.
• Messages: anything you send us by the contact form, email, or WhatsApp.
• Website usage: basic, mostly-anonymous analytics (via PostHog) to understand how the site is used and improve it.

Why we use it

To take and fulfil your orders, reserve pieces, arrange delivery or collection, send you order and payment updates, answer your enquiries, run your account, and improve the website. We only use your information for these purposes.

Who we share it with

We never sell your personal information. We share it only with the trusted service providers we need to run the shop:

• PayFast — to process card/online payments.
• Resend — to send you order and account emails.
• PostHog — website analytics.
• Our courier — to deliver your artwork.
• Fly.io & Tigris — secure hosting and file storage for the website and images.

Some of these providers may process data outside South Africa. Where they do, we rely on providers that offer an adequate level of protection, as POPIA allows. Our artwork-titling assistant (Anthropic) only ever sees painting images — never your personal information.

How long we keep it

We keep your information for as long as you have an account with us and for as long afterwards as we need to for our records, tax, and legal obligations. You can ask us to delete your account at any time (see your rights below).

Your rights

Under POPIA you have the right to:

• ask what personal information we hold about you;
• ask us to correct or update it;
• ask us to delete it (where we're not legally required to keep it);
• object to us using it; and
• complain to the Information Regulator of South Africa.

To exercise any of these, email hello@nickythomsonart.com. The Information Regulator can be reached at inforegulator.org.za.

Cookies & analytics

We use a small number of cookies and analytics to keep the site working (for example, your shopping cart) and to understand how it's used. You can block cookies in your browser settings, though some parts of the site may then not work as well.

How we protect your information

We take security seriously: connections are encrypted (HTTPS), passwords are stored only as secure hashes, access to the admin area is protected, and we keep our software up to date. No system is perfectly secure, but we work to protect your information and to keep it in safe hands.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.