PRIVACY POLICY
Last updated: September 10, 2026
This Privacy Policy explains how Sinikka Li ("I", "me", "my", or "I") collects, uses, stores, and protects personal information when you visit pigeonpostclub.com, purchase art prints, subscribe to Pigeon Post Club, contact me, or otherwise interact with the website.
I am the individual responsible for operating this website and for processing your personal information.
Contact details
Sinikka Li
Rua Capitão Henrique Galvão 18
1900-109 Lisboa
Portugal
Email: hello@pigeonpostclub.com
Website: www.pigeonpostclub.com
1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), Sinikka Li is the data controller responsible for personal information collected through pigeonpostclub.com.
If you have any questions about how your personal information is handled or want to exercise your privacy rights, you can contact me at:
2. WHAT PERSONAL INFORMATION I COLLECT
Depending on how you use the website, I may collect the following information:
When you purchase an art print
I may collect:
Your name
Email address
Billing address
Shipping address
Country
Order details
Payment and transaction information
Information you provide when contacting me about your order
When you subscribe to Pigeon Post Club
I may collect:
Your name
Email address
Postal/shipping address
Billing address
Country
Subscription information
Subscription start date
Renewal date
Cancellation date
Payment and transaction information
Your postal address is necessary for me to send your monthly Pigeon Post Club mail.
When you contact me
If you contact me by email or through a website form, I may collect your name, email address, and any information you choose to include in your message.
Information collected automatically
When you visit the website, certain technical information may be collected automatically, such as:
IP address
Browser type
Device type
Operating system
Pages visited
Date and time of visits
Referring website
Website interactions
Cookie and similar technology information
3. HOW I USE YOUR INFORMATION
I may use your personal information to:
Process and fulfill orders for art prints
Process and manage Pigeon Post Club subscriptions
Process payments
Send physical orders and monthly subscription mail
Communicate with you about your order or subscription
Send order confirmations and other necessary service-related emails
Respond to questions and customer service requests
Process cancellations, refunds, and subscription changes
Maintain accurate order and customer records
Prevent fraud and unauthorized transactions
Maintain and secure the website
Improve the website, products, and services
Send marketing communications where permitted and where you have provided the necessary consent
Comply with legal, tax, accounting, and other legal obligations
Establish, exercise, or defend legal claims and rights
I will not use your personal information for purposes that are incompatible with those described in this Privacy Policy without providing appropriate information or obtaining consent where required.
4. LEGAL BASES FOR PROCESSING
Under the GDPR, I process personal information on one or more of the following legal bases:
Performance of a contract
I process information that is necessary to:
Process and fulfill your art print order
Provide your Pigeon Post Club subscription
Process payments
Deliver physical products
Communicate with you about your purchase or subscription
For example, your name and shipping address are necessary to send an order to you.
Legal obligations
I may process and retain information when necessary to comply with legal obligations, including tax, accounting, consumer protection, or other applicable requirements.
Legitimate interests
I may process information where necessary for legitimate interests, including:
Maintaining and improving the website
Preventing fraud
Securing the website
Responding to customer inquiries
Maintaining appropriate business records
Protecting my legal rights
I will only rely on legitimate interests where those interests are not overridden by your rights and freedoms.
Consent
Where consent is the appropriate legal basis, I will ask for your consent before processing your information for that purpose.
You may withdraw consent at any time.
The withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
The Portuguese data protection authority notes that consent is only one possible legal basis under the GDPR and that processing necessary to perform a contract generally relies on the contractual legal basis rather than consent.
5. ART PRINT ORDERS
When you purchase an art print, I use your personal information to process and fulfill your order.
Your name and shipping address are used to prepare and deliver your order.
Your order information may also be retained as necessary for accounting, tax, legal, fraud-prevention, and customer service purposes.
6. PIGEON POST CLUB
Pigeon Post Club is a monthly physical mail subscription.
If you subscribe, your name and postal address are used to prepare and send your monthly mail.
Your subscription information may include:
Subscription status
Subscription start date
Renewal date
Cancellation date
Order history
Payment status
Your postal address may be shared with postal or delivery services when necessary to deliver your Pigeon Post Club mail.
You are responsible for keeping your shipping address accurate and up to date.
If you provide an incorrect or outdated address, this may prevent your mail from being delivered.
7. PAYMENTS
Payments for purchases and subscriptions are processed through Stripe.
I do not generally receive or store your complete credit card or debit card number.
Stripe may process personal information and payment information necessary to process your transaction and recurring subscription payments.
Stripe processes information according to its own privacy policy and applicable data protection requirements.
8. SQUARESPACE
This website is hosted and operated using Squarespace.
Squarespace may process certain personal information on my behalf in connection with website hosting, ecommerce functionality, security, analytics, and other website services.
Information processed through Squarespace may include information you submit through the website as well as technical information collected when you visit the website.
9. SHIPPING AND POSTAL SERVICES
To deliver physical art prints and Pigeon Post Club mail, your name and shipping address may be provided to postal services, shipping providers, or other delivery providers.
I only provide information that is reasonably necessary to deliver your order or subscription.
I do not sell or rent your postal address or customer information.
10. EMAIL COMMUNICATIONS
I may send emails necessary to provide your purchases or subscription, including:
Order confirmations
Payment confirmations
Subscription confirmations
Renewal information
Cancellation confirmations
Delivery or shipping information
Responses to customer inquiries
Important service announcements
These communications are necessary for providing the service and may be sent even if you do not wish to receive promotional emails.
If you choose to receive promotional or newsletter emails, you may unsubscribe at any time using the unsubscribe mechanism included in those emails or by contacting me at:
11. COOKIES
The website may use cookies and similar technologies.
Some cookies are necessary for the website to function properly, including ecommerce, security, and shopping functionality.
Other cookies or similar technologies may be used for purposes such as:
Understanding website usage
Improving website performance
Remembering preferences
Measuring marketing or advertising performance
Providing relevant content or advertising
Where required by applicable law, non-essential cookies will only be used after obtaining the appropriate consent.
You may also manage cookies through your browser or through any cookie-management tools made available on the website.
Disabling certain cookies may affect website functionality.
12. THIRD-PARTY SERVICES
The website may use third-party service providers that process personal information on my behalf or provide services necessary to operate the website and business.
These may include:
Squarespace — website hosting and ecommerce functionality
Stripe — payment processing and recurring subscription payments
Postal and delivery providers — delivery of physical orders and subscription mail
Third-party providers may process information according to their own privacy policies and contractual obligations.
The website may also contain links to third-party websites. I am not responsible for the privacy practices or security of third-party websites.
13. INTERNATIONAL DATA TRANSFERS
Because I use service providers that may operate internationally, your personal information may be processed or stored outside Portugal or the European Economic Area (EEA), including in countries such as the United States.
Where personal information is transferred outside the EEA, I will use appropriate safeguards required by applicable data protection law, such as an adequacy decision or appropriate contractual safeguards where applicable.
14. HOW LONG I KEEP YOUR INFORMATION
I retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
For example:
Order information may be retained for as long as necessary to fulfill the order and handle returns, customer service, accounting, tax, and legal obligations.
Subscription information may be retained while your subscription is active and afterward for legitimate business, accounting, tax, legal, and fraud-prevention purposes.
Customer service correspondence may be retained for as long as reasonably necessary to address the relevant matter.
Marketing information will generally be retained until you unsubscribe or withdraw your consent, where consent is the applicable legal basis.
Certain information may need to be retained for longer periods where required by law.
When personal information is no longer necessary, it will be deleted, anonymized, or securely disposed of where reasonably possible.
15. YOUR RIGHTS UNDER THE GDPR
Depending on the circumstances and applicable law, you may have the right to:
Request access to your personal information
Request correction of inaccurate or incomplete information
Request deletion of your personal information
Request restriction of processing
Object to certain processing
Request portability of your personal information
Withdraw consent where processing is based on consent
Object to direct marketing
Lodge a complaint with a data protection authority
These rights are subject to the conditions and exceptions provided by applicable law.
The Portuguese CNPD confirms that individuals have GDPR rights including access, rectification, objection, restriction, and erasure, and that requests should generally receive a response within one month, subject to permitted extensions.
16. HOW TO EXERCISE YOUR RIGHTS
To exercise any of your privacy rights, please contact me at:
Please clearly describe your request and provide enough information for me to identify the relevant personal information.
I may need to verify your identity before fulfilling certain requests in order to protect your personal information from unauthorized access.
Requests concerning your personal data are generally free of charge, unless applicable law permits a reasonable fee or permits refusal of an excessive or manifestly unfounded request.
17. RIGHT TO COMPLAIN
If you believe that your personal information has been handled unlawfully, you have the right to lodge a complaint with a supervisory authority.
As I am based in Portugal, the relevant supervisory authority is:
Comissão Nacional de Proteção de Dados (CNPD)
Rua de São Bento, n.º 148 - 3.º
1200-821 Lisboa
Portugal
You can find information about the CNPD and how to exercise your rights on its official website.
You may also have the right to contact the data protection authority in the country where you live or where you believe a violation occurred.
18. CHILDREN'S PRIVACY
The website is not intended for children under the age of 13, and I do not knowingly collect personal information from children under 13.
If you believe that a child has provided personal information through the website, please contact me at hello@pigeonpostclub.com.
19. DATA SECURITY
I take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
20. CHANGES TO THIS PRIVACY POLICY
I may update this Privacy Policy from time to time to reflect changes to the website, products, services, technology, or applicable legal requirements.
When this policy is updated, the "Last updated" date at the top of this page will be changed.
I encourage you to review this Privacy Policy periodically.
21. CONTACT
If you have any questions about this Privacy Policy or how your personal information is handled, please contact:
Sinikka Li
Rua Capitão Henrique Galvão 18
1900-109 Lisboa
Portugal
Email: hello@pigeonpostclub.com
Website: www.pigeonpostclub.com