Privacy Policy

Ver versión en Español

Effective date: October 19th, 2026. This policy applies to the databases below for as long as they are needed for the purposes listed, plus any period the law requires.

1. Who is responsible for your data

Sandra Mejia Posada, doing business as Art by Sandra Mejia. RUT 43.878.943. Address: Carrera 86 #48-133, Rionegro, Antioquia, Colombia. Email: hola@artbysandramejia.com. I personally handle all privacy requests.

2. What I collect

  • Newsletter and freebies: your email and first name.

  • Course applications: your name, email and your answers to the application questions.

  • Purchases: name, email and order details. You buy through Gumroad, which processes your payment and issues your receipt. Gumroad shares your name, email and order details with me; I never see or store your card details.

  • Students in live programs: your homework, artwork, messages, and your image and voice in live Zoom calls if you turn on your camera or microphone.

  • Contact form and email: what you choose to send me.

  • Website use: pages visited, device and browser type, approximate location and IP address, collected through cookies (see the Cookie Policy).

In-person ceramics classes: your name and phone number, which I use on WhatsApp to coordinate classes and, if you agree, to tell you about new ones.

I do not ask for sensitive data (such as health, religion or political views) and you don't need to share it. My programs are for adults 18 and over; I do not knowingly collect data from children.

3. Why I use it

  • To deliver what you asked for: freebies, classes, programs, feedback and support.

  • To send my newsletter and offers about my art, classes and programs, if you agreed to receive them. Flodesk tells me when you open an email or click a link, so I know what's useful; you can turn this off on your email preferences page.

  • To process payments, refunds, invoices and legal or tax duties.

  • To review applications and improve my programs.

  • To show testimonials or student work, only with your separate written permission.

  • To measure website traffic and fix problems, if you accept analytics cookies.

4. Your authorization

I process your data with your prior, express and informed authorization, given when you tick the consent box on a form or accept the cookie banner. You can withdraw it at any time.

5. Services that process data for me

I use these providers, most of which store data outside Colombia, mainly in the United States: Squarespace (website, forms and analytics), Flodesk (email newsletter), Gumroad (sales, payments, course delivery and live-call replays), Zoom (live calls), Gmail by Google (my email inbox), HubSpot (business contacts and emails, which track opens and clicks), Dropbox (file storage), Tally (forms for homework and for permission to share student experiences), YouTube (embedded videos), Canva and CapCut (to design graphics and edit videos, which may include student quotes, artwork or video clips shared with permission), WhatsApp (to coordinate in-person ceramics classes), ManyChat (automated Instagram and Facebook messages, which may collect your name and email when you ask for a freebie), Metricool (to schedule and analyze my social media posts), and Google Fonts and Adobe Fonts (to display the site's fonts). I also use AI writing assistants to help me draft texts; when I use them with student feedback, I first remove names and anything that identifies you. By giving your authorization, you also authorize this international transfer. I do not sell your data.

6. Your rights

You have the right to:

  • Know, update and correct your data.

  • Ask for proof of the authorization you gave.

  • Be told how your data is used.

  • Withdraw your authorization and ask me to delete your data, unless a legal or contractual duty requires me to keep it.

  • Access your data free of charge.

  • Complain to Colombia's data protection authority, the Superintendencia de Industria y Comercio (SIC), after first contacting me.

If you are in the EU or UK, you also have the rights to data portability, to object to processing, and to complain to your local data protection authority.

7. How to make a request

Email hola@artbysandramejia.com with your name, the email you used, and your request.

  • Questions about your data (consultas): I answer within 10 business days. If I need longer, I'll tell you why and answer within 5 more business days.

  • Corrections, deletions or complaints (reclamos): include your name, a description of the issue, and how to contact you. If something is missing, I'll ask within 5 days; if you don't reply within 2 months, the request is considered withdrawn. I answer within 15 business days, or within 8 more business days if I tell you the reason for the delay.

  • Unsubscribe from emails at any time with the link at the bottom of every email.

8. How long I keep your data

Newsletter data: until you unsubscribe. Student and purchase data: for as long as tax and commercial laws require, then deleted.

9. Security

I use password-protected accounts with two-step verification and trusted providers. No online system is 100% secure, but I take reasonable steps to protect your data.

10. Changes

If I make important changes to this policy, I'll post the new version here with a new effective date and notify subscribers by email.

Cookie Policy

Effective date: October 19, 2026

Cookies are small files your browser stores when you visit a website. This site uses:

Essential cookies. Set by Squarespace to make the site, cart, checkout and forms work, protect forms from fraud, and remember your cookie choice (for example CART, Crumb, ss_marketingcookiesAllowed). These don’t need your consent.

Analytics cookies. Set by Squarespace Analytics to count visitors and see where they come from and which pages they use, so I can improve the site (for example ss_cid, ss_cvisit, ss_cvr). Only used if you accept.

Embedded content. Set by YouTube (Google) when you play a video embedded on this site. Only used if you accept.

When you first visit, a banner asks you to accept or decline non-essential cookies. You can change your choice at any time with the "Cookie Preferences" link at the bottom of every page. Declining doesn't stop the site from working.

See Squarespace's list of cookies: https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses.

For how I handle your personal data, see the Privacy Policy.

Questions: hola@artbysandramejia.com