Privacy & Cookie Policy

This website is operated by Alice Nanavova Art Advisory. We are responsible for any personal data collected through this site. For any data protection questions, contact us at info@alicenanavova.com.

Contact form. When you fill in our contact form we collect your name, email address, telephone number (optional), area of interest, and the content of your message.

Analytics (with your consent). We use PostHog to collect anonymous data about how people use the site — pages visited, navigation paths, device type, and approximate location at country level. No full IP addresses are stored. No individual is identified.

• To respond to your enquiries and provide art advisory services
• To understand how visitors use our site so we can improve it (analytics, with consent only)
• To prevent automated spam submissions to our contact form

We do not sell your personal data. We do not use it for automated profiling or direct marketing without your consent.

• Contact enquiries — legitimate interests (responding to a request you initiated)
• Analytics cookies — your consent, given via the cookie banner
• Spam prevention — legitimate interests in protecting our contact form

Essential. Strictly necessary for the site to function. We store two values in your browser's local storage: av-cookie-consent (your cookie preferences, kept for two weeks then renewed on each visit) and av-contact-draft (a draft of what you have typed into the contact form so it is not lost on accidental reload). Neither is sent to any server. Both can be cleared from your browser at any time. Cannot be disabled.

Analytics. Used by PostHog to collect anonymous data about how visitors use the site. Only placed after you consent. PostHog processes data on EU servers.

You can change or withdraw your cookie consent at any time using the Cookie Preferences link in the footer of any page, or by contacting us at info@alicenanavova.com.

We use the following third-party services. We do not sell your data to any of them.

• PostHog — analytics. Data stored on EU servers (eu.i.posthog.com). See the PostHog Privacy Policy.
• Cloudflare Turnstile — bot protection for our contact form, provided by Cloudflare, Inc. Cloudflare processes browser signals to verify you are human. No data from this process is retained by us. See the Cloudflare Privacy Policy.
• Cloudflare DNS — authoritative DNS for this domain, provided by Cloudflare, Inc. When your device looks up the domain name, your DNS resolver contacts Cloudflare's nameservers. Cloudflare receives the DNS query but is not in the path of your HTTPS request itself — it does not see your full IP in a session context, your user agent, or the page you visit. See Cloudflare's GDPR statement.
• Brevo — transactional email delivery for the contact form, provided by Sendinblue SAS (trading as Brevo), based in France. When you submit the contact form, Brevo sends a notification email to us and an auto-reply confirmation to you. Brevo processes the data (name, email, phone, interest, message) only for the purpose of delivering these emails. See the Brevo Privacy Policy.
• Google Firebase — website hosting and contact-form backend (Cloud Functions), provided by Google Ireland Ltd. Firebase may log server access data including IP addresses for security purposes. See Google's Privacy Policy and the Firebase Data Processing Addendum.

PostHog processes analytics data within the EU — no transfer outside the EEA occurs for analytics. Where other services (Cloudflare, Google) transfer data outside the UK or EEA, such transfers are covered by Standard Contractual Clauses or equivalent safeguards.

• Contact form enquiries — up to six years from the date of your enquiry
• Analytics data (PostHog) — one year by default
• Spam prevention (Turnstile) — processed ephemerally at form submission, not retained by us
• Brevo transactional email logs — retained by Brevo per their service defaults (typically 30 days for delivery logs)
• Firebase Hosting access logs — retained by Google for a limited period for security and abuse-prevention purposes

You have the right to access, correct, or delete your personal data; to restrict or object to how we process it; to receive a portable copy of it; and to withdraw consent at any time.

To exercise any of these rights, email us at info@alicenanavova.com. We will respond within one month.

We may update this policy from time to time. Any changes will be published on this page with an updated date at the top. Where changes are material we will place a notice on the website.

Alice Nanavova Art Advisory
info@alicenanavova.com