Privacy Policy

Last updated July 2026

This Privacy Policy explains how Phoebe Rose collects, uses, and protects personal data when you visit our website or purchase a gift card or workshop spot from us.

We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

1. Who We Are

Phoebe Rose, Phoebe Bailey, Berlin, info@phoeberose.de

If you have any questions about this policy or how we handle your data, contact us at the email address above.

2. What Data We Collect

Our website is primarily a portfolio site. We only collect personal data when you make a purchase (a gift card or a workshop booking) or use our contact forms . At checkout, we collect:

• Your name

• Your email address

• Payment details are processed directly by our payment provider (e.g., Stripe / PayPal / Squarespace) — we do not store your card or payment information ourselves.

We do not use cookies for tracking or marketing, and we do not collect data through newsletters or analytics tools beyond what is described here.

3. Why We Collect This Data

We collect your name and email address solely to:

• Process and confirm your gift card or workshop purchase

• Issue receipts or confirmations

• Identify you if you attend a workshop or redeem a gift card

• contact you back after you have used our contact form

Legal basis: Processing is necessary for the performance of a contract with you (Art. 6(1)(b) GDPR) — i.e., fulfilling the purchase you made.

We do not:

• Send marketing emails or newsletters

• Contact you for any reason unrelated to your specific purchase or request

• Share, sell, or rent your data to third parties for their own marketing purposes

• Reuse your details for any purchase other than the one you made

4. How Long We Keep Your Data

We retain your name and email address only as long as necessary to fulfil the purchase and to meet our legal obligations, including German commercial and tax retention rules (typically 6–10 years for invoice-related records under §147 AO / §257 HGB). After this period, data is securely deleted.

5. Who We Share Data With

We share limited data only where necessary to operate the website and process payments:

• The payment processor processes your payment details directly. Please refer to their privacy policy for how they handle your data.

• Squarespace stores website data on our behalf.

We do not sell your personal data or share it with third parties for advertising purposes.

6. Your Rights Under GDPR

As a data subject, you have the right to:

• Access the personal data we hold about you

• Rectify inaccurate data

• Erase your data ("right to be forgotten"), subject to our legal retention obligations

• Restrict processing in certain circumstances

• Data portability — receive your data in a structured, machine-readable format

• Object to processing based on legitimate interests

• Lodge a complaint with a supervisory authority — in Germany, this is your regional Landesdatenschutzbehörde, or the Data Protection Authority

To exercise any of these rights, contact us at info@phoeberose.de

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

8. Children's Data

Our services are not directed at children, and we do not knowingly collect personal data from minors without parental consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision.

10. Contact Us

For any privacy-related questions or requests, please contact:

Phoebe Rose at info@phoeberose.de