Privacy Policy

1. Privacy at a Glance

Protecting your personal data is important to me. This Privacy Policy explains which personal data may be processed when you visit this website, use my services or place an order through sacredwithin.de.

The person responsible for data processing on this website is:

Caroline-Marie Kreuzer
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
Germany

Email: hello@sacredwithin.de

2. Hosting

This website is hosted by Hostinger.

When you access this website, technical data such as your IP address, the date and time of access, browser type, operating system and pages visited may be processed and stored in server log files.

This processing is carried out in particular to ensure the secure and technically reliable operation of the website.

3. Contact

If you contact me by email or through a contact option provided on this website, I process the information you provide in order to respond to your enquiry.

Depending on the nature of your enquiry, the processing may be necessary to take steps before entering into a contract, to perform an existing contract or to pursue my legitimate interest in responding to enquiries.

Your data will not be shared with third parties without a legal basis.

4. Newsletter

If you subscribe to my newsletter, your email address and, where applicable, your name will be processed.

I use Hostinger Reach to send the newsletter.

Subscription takes place using a double opt-in procedure. Your subscription is only confirmed after you click the corresponding confirmation link.

You can withdraw your consent at any time with effect for the future, for example by using the unsubscribe link included in every newsletter email.

Transactional emails relating to orders, payments, delivery or customer service are not marketing emails and may still be sent where necessary.

5. Online Shop and Orders

Digital products offered under Sacred Within and original physical artworks offered under Sacraia can be purchased through WooCommerce on this website.

To process and fulfil an order, the personal data required for this purpose will be processed. This may include:

  • name;
  • email address;
  • billing information;
  • shipping address where required;
  • order and product information;
  • payment and payment-status information; and
  • where applicable, customer-account information.

The processing is carried out where necessary for the performance of the contract concluded with you and to comply with legal obligations, particularly tax and commercial record-keeping requirements.

Certain data must therefore also be retained for the legally required period after an order has been completed.

6. Payments

Different payment methods may be available depending on the product purchased.

I use WooPayments for certain payment methods offered for Sacred Within products.

If you select a payment method processed through WooPayments, the data required to process your payment will be transmitted to the service providers involved in the payment process. This may include contact details, billing information, payment information, transaction data and technical data.

WooPayments uses, among other services, the technical infrastructure of Stripe to process payments.

Sacraia original artworks are generally paid by bank transfer. Where bank transfer is used, information relating to the payment and its status may be processed to identify the payment, fulfil the order and maintain the required accounting records.

The processing of payment information is carried out where necessary for the performance of the contract and compliance with applicable legal obligations.

7. Shipping and Delivery of Sacraia Artworks

To fulfil orders for Sacraia original artworks, personal data required for delivery may be shared with postal services, shipping carriers, logistics providers, customs authorities or other parties involved in transporting the artwork.

This may include your name, delivery address, email address, order number, shipment details and, where necessary, customs information.

The information is processed and transmitted only to the extent necessary to fulfil your order or comply with applicable legal requirements.

For international shipments, necessary personal data may be transferred to recipients outside the European Economic Area where this is required to deliver the artwork to you.

8. Cookies and Consent Management

This website uses cookies and similar technologies that may be necessary for certain website functions.

I use Complianz to manage consent.

Where your consent is required for the use of certain cookies or technologies, these will generally only be used after you have given your consent.

You can change or withdraw your consent at any time through the website’s cookie settings.

Technically necessary cookies may also be used without prior consent where permitted by law.

9. Protected Digital Content

Access to certain areas of this website may be restricted for purchased digital content.

For this purpose, technical information as well as information relating to your purchase or user account may be processed in order to verify whether you are authorised to access the relevant content.

10. External Links

This website contains links to external platforms, including:

  • YouTube;
  • Spotify; and
  • Pinterest.

Content from these platforms is not embedded directly through external media where this has not been separately disclosed.

When you click an external link, you leave this website. Any subsequent processing of your data by the respective provider is governed by that provider’s own privacy practices.

11. Recipients of Personal Data

Where necessary for the purposes described in this Privacy Policy, personal data may be shared with:

  • hosting and technical service providers;
  • payment providers and financial institutions;
  • shipping, logistics and customs providers;
  • email and newsletter providers;
  • ecommerce and order-management service providers;
  • professional advisers such as tax or legal advisers; and
  • public authorities where disclosure is legally required.

Personal data is only shared where there is a legal basis for doing so.

12. International Data Transfers

Some service providers or recipients may process personal data outside the European Economic Area.

Where required, transfers are made on the basis of an applicable legal mechanism, such as an adequacy decision, appropriate safeguards or another legally permitted basis.

For international Sacraia deliveries, certain transfers may also be necessary for the performance of the contract.

13. Data Retention

Personal data is stored only for as long as necessary for the respective purpose.

Where statutory retention obligations apply, the relevant data will be stored for the legally prescribed period and subsequently deleted, unless another legal basis permits or requires further storage.

Order, invoice, payment and accounting records may therefore be retained after an order has been completed.

Newsletter data is retained until you unsubscribe or withdraw your consent, subject to any limited retention necessary to document consent or prevent further marketing messages.

14. Your Rights

Subject to the applicable legal requirements, you have in particular the right to:

  • access your personal data;
  • correct inaccurate data;
  • request deletion of your data;
  • restrict the processing of your personal data;
  • data portability;
  • object to certain types of processing; and
  • withdraw consent you have previously given with effect for the future.

Where processing is based on legitimate interests, you may have the right to object to that processing on grounds relating to your particular situation.

You may object to the processing of personal data for direct marketing at any time.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

15. Data Security

Appropriate technical and organisational measures are used to protect personal data against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access.

The website uses encrypted connections where supported. Payment information is processed through the secure systems of the respective payment provider.

16. Changes to this Privacy Policy

I may update this Privacy Policy if the website, services used, data-processing activities or applicable legal requirements change.

The current version will be published on this page.

Last updated: September 2026