Privacy policy

Privacy Policy

We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information in compliance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK Data Protection Act, and other applicable privacy laws worldwide. Effective March 2026.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

1. Data Controller

The data controller responsible for your personal data is:

ANGKOR ARTWORK
Wat Bo Road, Sala Kamroeuk, Siem Reap 17000, Kingdom of Cambodia
Registration: No. 50003135 · TIN: E116-1500003506
Represented by: STOCKER ERIC LOUIS MICHEL
Privacy contact: admin@stockerstudio.com

2. What Data We Collect

We collect only the data necessary to process your orders, provide our services, and improve your experience:

  • Identity & contact data: Name, email address, phone number, shipping and billing address
  • Financial data: Payment method, transaction details, purchase amounts. We do not store full card numbers — payment processing is handled securely by our payment providers.
  • Account data: Username, password, preferences and settings (if you create an account)
  • Transaction data: Order history, items viewed, items in cart, wishlist, purchases, returns and exchanges
  • Communication data: Messages you send us via contact forms, email, WhatsApp, or social media
  • Device & technical data: IP address, browser type and version, device information, operating system, unique device identifiers, pages visited, referring URL, network connection information
  • Usage data: How and when you interact with our website, navigation patterns, time spent on pages
  • Preference data: Language, currency, marketing opt-in status

3. How We Collect Your Data

We collect personal information from the following sources:

  • Directly from you: When you create an account, place an order, contact us, subscribe to our newsletter, or visit our workshop
  • Automatically: Through cookies and similar technologies when you use our website
  • From service providers: When they collect or process your information on our behalf (e.g., Shopify, payment processors)

4. How We Use Your Data

Depending on how you interact with us, we use your personal data for:

  • Order fulfillment: Processing payments, fulfilling orders, arranging shipping, sending confirmations and tracking, handling returns and exchanges
  • Customer service: Responding to inquiries, handling warranty claims, maintaining your account
  • Personalization: Remembering your preferences, recommending products related to your interests and purchases
  • Marketing: Sending newsletters and promotional offers (only with your explicit consent — you can unsubscribe at any time via the link in every email)
  • Security & fraud prevention: Authenticating accounts, detecting fraudulent or illegal activity, protecting public safety
  • Website improvement: Analyzing usage patterns to improve our website, products, and services
  • Legal obligations: Tax compliance, regulatory record-keeping, responding to lawful requests from authorities

5. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation, we process your personal data on the following legal grounds:

  • Contract performance (Art. 6(1)(b)): Processing necessary to fulfill your order and deliver your purchases
  • Legitimate interest (Art. 6(1)(f)): Improving our website, preventing fraud, ensuring security, and personalizing your experience
  • Consent (Art. 6(1)(a)): Marketing communications, non-essential cookies, and targeted advertising (you may withdraw consent at any time)
  • Legal obligation (Art. 6(1)(c)): Tax, accounting, and regulatory compliance

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies:

  • Essential cookies: Required for the website to function (shopping cart, session management, language preference, security). These cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). Set only with your consent.
  • Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness. Set only with your explicit consent.

You can manage your cookie preferences through your browser settings or our cookie consent banner. Disabling non-essential cookies will not affect the core functionality of our website.

We honor the Global Privacy Control (GPC) signal. If you visit our website with GPC enabled, we will automatically treat this as a request to opt out of the sale or sharing of your personal information for the device and browser you use. To learn more, visit globalprivacycontrol.org.

7. How We Share Your Data

We share your data with trusted third parties only as necessary to provide our services:

  • Shopify: Our e-commerce platform, which hosts, processes, and stores order data
  • Payment processors: ABA PayWay, Shopify Payments, PayPal, and Stripe for secure transaction processing
  • Shipping carriers: DHL, FedEx, UPS, and Cambodia Post (name and address shared for delivery)
  • Analytics: Google Analytics for website traffic analysis (anonymized, with your consent)
  • Email service: For order confirmations and marketing communications (with consent)

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

We may also disclose your information: when you direct or consent to it; to our corporate affiliates; in connection with a business transaction (merger, acquisition); or to comply with legal obligations, enforce our terms, or protect rights and safety.

8. Relationship with Shopify

Our store is hosted by Shopify, which collects and processes personal information about your access to and use of our services. Information you submit may be transmitted to and shared with Shopify and third parties located in countries other than where you reside. To learn more about how Shopify uses your personal information, visit the Shopify Privacy Policy.

9. Data Retention

We retain your personal data only for as long as necessary:

  • Order data: 7 years after the transaction (tax and legal compliance)
  • Account data: Duration of your account, plus 3 years after last activity
  • Marketing data: Until you withdraw consent or unsubscribe
  • Analytics data: Anonymized data retained for up to 26 months

10. Your Rights

Everyone, regardless of where you live, has the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to correction: Request correction of inaccurate or incomplete data
  • Right to deletion: Request deletion of your personal data, subject to legal retention requirements
  • Right to data portability: Receive your data in a structured, commonly used, machine-readable format

Additional rights for EU/EEA and UK residents (GDPR):

  • Right to restriction (Art. 18): Request that we restrict processing in certain circumstances
  • Right to object (Art. 21): Object to processing based on legitimate interest or for direct marketing
  • Right to withdraw consent (Art. 7): Withdraw consent at any time, without affecting prior lawful processing
  • Right to lodge a complaint with your local data protection supervisory authority (find your authority)

Additional rights for California residents (CCPA/CPRA):

  • Right to know: What personal information we collect, use, disclose, and sell
  • Right to delete: Request deletion of personal information we collected from you
  • Right to opt out: Opt out of the "sale" or "sharing" of your personal information for targeted advertising
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

UK residents benefit from equivalent rights under the UK Data Protection Act 2018 and UK GDPR.

To exercise any of these rights, contact us at admin@stockerstudio.com. We will respond within 30 days (or sooner if required by your local law). We may need to verify your identity before processing your request.

11. International Data Transfers

As we operate from Cambodia, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or the United Kingdom. When we transfer data internationally, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreements where applicable
  • Working with service providers certified under recognized data protection frameworks
  • Implementing appropriate technical and organizational security measures

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data. All transactions are processed through SSL-encrypted connections. However, no method of transmission over the Internet is 100% secure — we cannot guarantee absolute security. We recommend that you do not use unsecure channels to communicate sensitive information.

13. Children's Privacy

Our website and services are not directed at individuals under the age of 16 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete it. As of the effective date of this policy, we do not have actual knowledge that we sell or share personal information of individuals under 16 years of age.

14. Third-Party Links

Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the revised policy on this page, update the "Last updated" date, and provide notice as required by applicable law. Significant changes will be communicated via our website or by email.

16. Contact Us

For any questions about this Privacy Policy, to exercise your data protection rights, or to file a complaint about how we handle your data, please contact us:

ANGKOR ARTWORK — Data Protection
Wat Bo Road, Sala Kamroeuk, Siem Reap 17000, Kingdom of Cambodia
Email: admin@stockerstudio.com
Phone: +855 (0)12 828 706
Website: stockerstudio.com

For the purpose of applicable data protection laws, we are the data controller of your personal information.

EU residents may also use the European Commission's Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

Last updated: March 2026