Privacy Policy - Zeus Blues Art Studio
Effective date: 26 August 2026
Last updated: 26 August 2026
Website: www.zeusblues.com
Operator / Data Controller: Suzie Toumeh / Zeus Blues Art Studio (KVK: 42070628)
Email: zeus.blues.art@gmail.com
Location: The Netherlands
This Privacy Policy explains how Zeus Blues Art Studio ("I", "me", "my", "we", or "the Site") processes personal data when you visit www.zeusblues.com, contact me through the website, book a discovery call, or purchase a product through an external service linked from the Site.
I operate Zeus Blues Art Studio as a Dutch sole proprietorship (eenmanszaak) and provide art education and related creative services to adults. I also offer digital and/or physical creative products through third-party platforms.
This Privacy Policy applies to the processing of personal data in connection with the Site. When you use a third-party service such as Google, Payhip or Paypal that provider may also process your personal data under its own privacy policy.
1. Who operates this website
The website is operated by:
Suzie Toumeh / Zeus Blues Art Studio
The Netherlands
Email: zeus.blues.art@gmail.com
For privacy-related questions or requests concerning personal data processed by me, you can contact me at the email address above.
2. Services used by the website
The website is operated using Blogger/Google.
The domain name is registered through Squarespace. Squarespace is used for domain-registration purposes.
The Site also uses or links to the following third-party services:
Google/Blogger for website hosting and related website functionality;
Google services for the contact form;
Google Calendar for discovery-call scheduling;
YouTube for embedded videos;
Payhip for product sales and checkout;
PayPal as the payment service connected to Payhip.
I do not currently use Google Analytics, newsletter software, or email-marketing services on the Site.
3. Information collected when you visit the website
When you visit the Site, technical information may be processed by Google/Blogger and other services necessary to operate particular website features.
Depending on the configuration of the website and the particular service being accessed, this may include information such as:
IP address;
browser and device information;
operating system and language settings;
date and time of access;
requested pages or resources;
referring website or URL;
technical and security information;
cookies or similar technical identifiers.
The exact information processed depends on the technology and settings active when you access the Site.
The website does not intentionally collect browsing profiles for advertising purposes, and I do not sell personal information.
4. Contact form
The website provides a contact form.
The form contains the following fields:
Name — optional;
Email address — required;
Message — required.
If you submit the contact form, the information you provide is processed so that I can:
receive and respond to your enquiry;
communicate with you about your enquiry;
determine whether my services may be relevant to your request; and
keep an appropriate record of the communication where reasonably necessary.
The legal basis for processing information submitted through the contact form is generally Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract, and/or Article 6(1)(f) GDPR where processing is necessary for my legitimate interests in responding to and administering enquiries.
Please do not submit sensitive personal information, medical information, passwords, payment-card information, or other confidential information through the contact form unless it is specifically necessary and appropriate.
The contact form operates through Google/Blogger systems. Google may process technical information associated with the submission in accordance with its own privacy practices.
5. Discovery-call booking
The website provides a Google Calendar booking option for discovery calls.
When you book a call, the booking form asks for:
first name;
last name;
email address;
selected date and time.
This information is processed to:
schedule the requested discovery call;
send or administer appointment-related communications;
maintain the appointment record; and
communicate with you about the scheduled call.
The legal basis is generally Article 6(1)(b) GDPR, because processing is necessary to take steps at your request before entering into a possible service relationship.
Google processes information in connection with its Calendar and booking services. Google's own privacy policy also applies to Google's processing.
6. Payhip and PayPal
The Site links to or directs customers to Payhip for the purchase of my creative products, including a pre-order of my illustration and poetry book.
When you purchase a product through Payhip, Payhip may process information necessary to provide its services and complete the transaction. Depending on the transaction, this may include information such as your name, email address, billing or transaction information, order details, and technical information.
Payment is processed through the payment provider selected for the Payhip checkout. For my current setup, this includes PayPal.
I do not receive your full payment-card number through the normal Payhip checkout process.
I may receive information necessary to:
fulfil your order;
provide access to or deliver the purchased product;
communicate with you about your purchase;
provide customer support; and
maintain accounting, tax, and business records.
The legal basis for processing purchase information is generally Article 6(1)(b) GDPR, because processing is necessary to perform the purchase contract.
Processing required for accounting and tax obligations may be based on Article 6(1)(c) GDPR.
Payhip and PayPal may process personal data as independent controllers for their own services and legal obligations. Their respective privacy policies therefore also apply.
7. Embedded YouTube videos
Some pages of the Site contain embedded YouTube videos that can be watched directly on the website.
When an embedded YouTube player is loaded or used, Google/YouTube may process technical information about your device, browser, IP address, and interaction with the video or embedded player.
The processing is carried out by Google/YouTube under Google's applicable privacy practices.
I do not use YouTube as an advertising or analytics service for the Site.
Where technically possible, I will use privacy-conscious YouTube embedding settings. The exact data processing associated with an embedded video may nevertheless depend on Google's current technology and the settings of the particular video.
8. Social-media links
The Site contains links to social-media profiles.
These are ordinary external links. The Site does not currently embed social-media feeds or social-media tracking tools.
If you click a social-media link and leave www.zeusblues.com, the relevant social-media provider's own privacy policy and terms will apply.
9. Cookies and similar technologies
The Site may use cookies or similar technologies provided by Blogger/Google, embedded services, or other technical providers.
Some cookies or similar technologies may be necessary for:
website functionality;
security;
technical operation;
remembering certain settings; or
providing embedded content.
The Site does not currently use Google Analytics.
Where optional cookies or similar technologies requiring consent are used, they should only be activated in accordance with applicable law and an appropriate consent mechanism.
You can also manage or delete cookies through your browser settings. Blocking certain cookies may affect the functionality of parts of the Site.
10. How personal data is used
Depending on how you interact with the Site, personal data may be processed to:
operate and secure the website;
respond to enquiries;
schedule discovery calls;
communicate with you about appointments;
provide or administer services;
process and fulfil purchases;
provide customer support;
maintain accounting and tax records;
prevent fraud, abuse, spam, and unauthorized access;
comply with legal obligations; and
establish, exercise, or defend legal claims where necessary.
I do not sell personal information.
I do not currently use contact information for newsletter or email-marketing campaigns.
11. Legal bases under the GDPR
Where the GDPR applies, the relevant legal basis depends on the particular processing activity.
These may include:
Contract or pre-contractual measures Article 6(1)(b) GDPR
This may apply when you submit an enquiry, request a discovery call, or purchase a product and processing is necessary to respond to your request or perform the relevant agreement.
Legal obligation - Article 6(1)(c) GDPR
This may apply where personal data must be retained or processed to comply with applicable accounting, tax, or other legal obligations.
Legitimate interests - Article 6(1)(f) GDPR
This may apply where processing is necessary for legitimate business interests, such as maintaining website security, preventing misuse, responding to communications, administering the business, and establishing or defending legal claims, provided that those interests are not overridden by your rights and freedoms.
Consent - Article 6(1)(a) GDPR
Consent may apply where the law requires consent for a particular optional technology or processing activity.
The applicable legal basis is determined according to the specific processing activity.
12. Recipients and third-party providers
Personal data may be processed by the following providers, depending on how you use the Site:
Google / Blogger - website platform and related website functionality;
Google Calendar - appointment scheduling;
Google / YouTube - embedded video functionality;
Payhip - product storefront, checkout, and related transaction processing;
PayPal - payment processing;
Squarespace - domain registration and related domain/DNS services;
Google / Gmail - where necessary to receive and respond to communications.
These providers may process personal data under their own privacy policies and terms and may act as independent controllers for some processing.
Once you leave www.zeusblues.com and use an external service, that provider's own privacy policy applies to its processing.
13. International data transfers
Some service providers used by the Site may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA and the GDPR applies, the transfer should be carried out using a lawful transfer mechanism under Chapter V GDPR, such as an adequacy decision or appropriate safeguards where applicable.
The relevant provider's own privacy documentation explains its applicable international-transfer arrangements.
14. Data retention
I retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required by law or is necessary to establish, exercise, or defend legal claims.
Contact-form enquiries that do not result in a business relationship are generally deleted within 12 months after the enquiry has been resolved, unless there is a legitimate reason to retain them for longer.
Discovery-call booking information is generally retained for as long as necessary to administer the appointment and, where no business relationship results, normally for no longer than 12 months after the appointment.
Personal data contained in business, accounting, tax, purchase, and invoice records is retained for the period required by applicable Dutch law. In particular, records subject to the Dutch tax administration retention obligation are generally retained for seven years.
Where information is necessary for an ongoing legal claim, dispute, or other legal obligation, it may be retained for the period necessary for that purpose
15. Your rights under the GDPR
Depending on the circumstances and applicable law, you may have the right to:
request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
withdraw consent where processing is based on consent;
receive personal data in a portable format where the right to data portability applies; and
lodge a complaint with a competent data-protection supervisory authority.
To exercise your rights in relation to personal data processed by me, contact:
You may also lodge a complaint with a supervisory authority. In the Netherlands, the relevant supervisory authority is the Autoriteit Persoonsgegevens.
16. Children's privacy
The Site and my art-mentoring services are intended for adults.
I do not knowingly request personal information from children for the purpose of providing adult art mentoring services.
17. External services and links
The Site contains links to external websites and services.
I am not responsible for the privacy practices, security, or content of external websites. When you follow an external link, the privacy policy of the relevant provider applies.
This includes, where applicable, Google, YouTube, Payhip, PayPal, social-media platforms, and other third-party services.
18. Security
I take reasonable measures appropriate to the nature of the personal data and the circumstances to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
19. Changes to this Privacy Policy
I may update this Privacy Policy when the website, services, technology, third-party providers, or applicable legal requirements change.
The most recent version will be published on this page and identified by its effective or last-updated date.
Effective date: 26 August 2026
20. Contact
For questions about this Privacy Policy or requests concerning your personal data, please contact:
Suzie Toumeh / Zeus Blues Art Studio
The Netherlands
Email: zeus.blues.art@gmail.com