Last updated 23 September 2026

Privacy policy

Hawar Arts is a small family art business in Erbil, Kurdistan Region of Iraq. We sell original oil paintings through hawararts.com. This page explains what personal information we collect, why, who we share it with, and the choices you have.

Who is responsible

Hawar Arts, Italy 1, Villa 471, Erbil, Iraq, is responsible for your information. For privacy questions or requests, email sara74673936@gmail.com. You can also reach us on WhatsApp (+964 751 092 3542) or Instagram.

What we collect

• When you place an order: your name, email address, phone number, country, shipping address and the paintings you chose.
• When you create an account: your email address, and either a password or your Google account. If you continue with Google, Google shares your name, email address and profile picture with us. Sign-in is handled by Google Firebase Authentication; we never see or store your password.
• When you pay: payments are made on Wayl’s secure checkout. We receive the payment status and reference, never your card details.
• If you accept analytics cookies: how you use the site, such as pages viewed, paintings opened and selections made, along with general device and approximate location information collected by Google Analytics.

How we use it and why

• To handle your order, reserve paintings, arrange payment and shipping, and send you updates. This is necessary to fulfil our agreement with you.
• To run your account and show your order history. This is necessary to provide the service you asked for.
• To keep records of sales and payments that we are required to keep by law.
• To understand how the gallery is used and improve it, only with your consent.

We do not sell your information and we do not use it for advertising.

Who we share it with

• Google Firebase for sign-in, and Google Analytics for visitor statistics if you accept analytics cookies.
• Supabase, which stores our order and account records.
• Wayl, which processes payments.
• Galina, our shipping provider, which receives the details needed to deliver your painting.
• Our hosting provider in Germany, which runs the website server.

Some of these providers process data outside your country, including in the United States. Where the law requires it, they protect transfers with safeguards such as standard contractual clauses.

Cookies and similar storage

• Always used (necessary): storage that keeps you signed in, remembers the paintings in your selection during your visit, keeps access to an order you just placed, and remembers your cookie choice.
• Only with consent (analytics): Google Analytics cookies (_ga and _ga_*), which can last up to two years. They are not set unless you choose “Accept”.

You can change your choice at any time. Rejecting analytics removes the Google Analytics cookies.

How long we keep it

We keep order and payment records for as long as needed to complete your order and meet our legal and accounting obligations. We keep your account until you ask us to delete it. Analytics data is kept by Google Analytics for the retention period set in our account.

Your rights

Depending on where you live, including the UK and the European Union, you can ask to access, correct or delete your information, object to or restrict how we use it, receive a copy of it, and withdraw consent at any time. Contact us using the details above. If you are unhappy with how we handled your information, you can complain to your data protection authority, such as the Information Commissioner’s Office in the UK.

Children

The gallery is not intended for children under 16, and we do not knowingly collect their information.

Changes

If we change this policy, we will update this page and the date at the top.