EnkatArt — Privacy Policy

Last updated: 5 Sep 2026 · Version 1.0This Privacy Policy explains what personal data I collect when you commission me, why I use it, and your rights. It applies alongside my Terms of Service. By ordering a commission, you acknowledge this policy.

1. Who I am (Data Controller)

I am EnkatArt, an independent illustrator operating under this pseudonym as a registered sole proprietor (ФОП / individual entrepreneur) based in Ukraine. For any privacy question or request, contact me at my email. I am the data controller for the personal data described below.

2. What data I collect

I only collect what I need to work with you:

  • Your contact handle / username and email address;

  • The references, brief, and details you send for your commission (which may include a character design you provide);

  • Your commission history with me (what you ordered, correspondence);

  • Payment-related information processed through Payoneer (I receive confirmation of payment; I do not store your full card or bank details myself).

3. Why I use it

  • To communicate with you and complete your commission;

  • To send invoices and receive payment;

  • To keep records I am required to keep by law (accounting and tax);

  • To prevent and respond to fraud and chargebacks;

  • To display finished artwork in my portfolio and on social media — I only ever show the artwork itself and never your name or personal details (unless you bought a Private Commission/NDA, in which case I show nothing).

4. Legal bases (GDPR)

Where GDPR applies, I rely on: performance of a contract (completing your commission); legitimate interests (running my art business, preventing fraud, showing my portfolio); and legal obligation (keeping tax/accounting records).

5. Who I share it with

I do not sell your data or share your references with anyone for their own use. I use a small number of service providers ("processors") to operate:

  • Payoneer — to invoice you and receive payment;

  • My form / website host (e.g. Carrd and/or Google Forms) — to receive your order;

  • A file-transfer / cloud service — to deliver your finished files.

Each processes your data only to provide that service, under its own privacy terms.

6. International transfers

I am based in Ukraine, outside the EU/EEA, and the providers above may process data outside your country. By commissioning me, you understand your data will be handled in Ukraine and by these providers. I take reasonable care to work only with reputable services.

7. How long I keep it

I keep your project data only as long as needed to complete your commission and for a short period afterwards (finished files for about three (3) months). Records I must keep for tax and accounting are retained for as long as the law requires. After that, I delete or anonymise your data.

8. Your rights (EU/EEA residents)

If you are in the EU/EEA, you have the right to access your data, and to request correction, deletion, restriction, portability, or to object to certain processing. You also have the right to complain to your local data protection authority. To exercise any right, email me at my email; I will respond within a reasonable time, usually within 30 days (subject to records I must keep by law).

9. Security

I take reasonable steps to protect your data and keep access to it limited to what's needed to complete your commission. No online transfer is ever 100% secure, but I handle your information with care.

10. Children

My work and services are not directed to children, and all commissions are SFW only. I don't knowingly work with or collect data from children. If I become aware that someone is below the digital-consent age in their country, I will stop and delete their data. I don't ask for or verify anyone's age as a routine step.

11. Changes to this policy

I may update this Privacy Policy from time to time. The current version and its date are shown at the top. Significant changes will be reflected here.

12. Contact

For any privacy question or request, contact me at my email.