Privacy policy

Introduction

This policy describes how Epic By an Artist collects, uses and protects the personal data of visitors and members of the site epicby.art, in accordance with the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018.

Data controller

[Company name] · Registered office: [Address] · Email: [contact@epicby.art]

Data collected

Depending on your interaction with the site, the following data may be collected:

• Newsletter subscription: email address.
• Account creation: email address, name (optional).
• Le Cercle Epic membership: payment information processed by Stripe (we do not store any card details).
• Event reservation: email + event identifier.
• Contact requests (artists, space rental, patronage): name, email, message.

Purposes

Your data is used to:

• Send you the programme and membership-related communications.
• Manage subscriptions, ticketing and reservations.
• Respond to your requests.
• Comply with our legal and tax obligations.

Legal basis

Processing is based on your consent (newsletter), the performance of the contract (membership, ticketing) or our legitimate interest (responding to your requests).

Processors

Data is processed by technical providers acting on our behalf:

• Stripe (payments)
• Supabase (user database and reservations)
• Resend (transactional emails and sign-in links)
• Brevo (newsletter)
• Mux (video playback)
• Sanity (content management)
• Vercel (hosting)

Retention

Data is kept for the time necessary for the purpose of the processing, then archived or deleted in accordance with legal obligations.

Your rights

Under GDPR, you have at any time the right:

• to access your data
• to rectification
• to erasure
• to portability
• to object
• to withdraw consent

Complaint

To exercise these rights, write to us at: [contact@epicby.art]. If you believe your rights are not respected, you may file a complaint with the Data Protection Authority (APD) — autoriteprotectiondonnees.be.

Cookies

The site uses technical cookies necessary for its operation (session, authentication, language preferences). No analytics or advertising cookies are placed without your consent.