Privacy notice

KNH Art + Design in Amsterdam is responsible for the personal information described in this notice. Kelly handles enquiries about artwork, commissions and the studio. This notice covers the website and those enquiries.

For privacy questions or requests, email [email protected].

When you contact Kelly

When you email, we receive your email address, your name if you provide it, and the contents of your message. Please only include information needed for your enquiry. The website’s email links open your own email app; the website does not submit a contact form or create an account.

We use this information to reply and discuss your request. For an enquiry about buying or commissioning artwork, the legal basis is taking steps at your request before entering a contract. For other questions, it is our legitimate interest in responding to people who contact the studio. You choose whether to contact us, but we need a way to reply to answer your enquiry.

Website hosting and security

Cloudflare hosts and delivers this website. When you visit, it processes technical request information such as your IP address, the requested page, the time of the request and browser information to deliver the page and protect the service. Our legal basis is our legitimate interest in providing a working, secure website.

Cloudflare operates internationally and may process information outside the European Economic Area, including in the United States. Its data processing terms describe the safeguards for international transfers, including standard contractual clauses. You can contact us for information about the applicable safeguards.

Website statistics

We use Cloudflare Web Analytics to understand page visits and loading performance. Cloudflare states that this service does not collect or use visitors’ personal data. This is separate from the technical information processed to host and secure the website.

Language, fonts and cookies

The EN | NL language switch uses ordinary links. It does not set a cookie or save your choice in browser storage. The website serves its fonts from its own domain, so loading a page does not request fonts from Google.

We do not add advertising cookies. Cloudflare may use security cookies when needed to protect the website; these are separate from language selection and Web Analytics.

Who receives your information

Messages sent to [email protected] are forwarded by Cloudflare Email Routing to Kelly’s Gmail account. Cloudflare processes messages to forward them, and Google provides the mailbox where Kelly receives and handles enquiries. This includes the sender’s address, message contents and any attachments. Google’s privacy policy applies to its processing through Gmail. We may also disclose information where required by law.

Google operates internationally and may process information outside the European Economic Area. Its published transfer safeguards describe adequacy decisions and, where required, standard contractual clauses. You can find details and information about obtaining a copy of the clauses through the links below.

Instagram links take you to a separate service, where Instagram’s privacy policy applies. We do not embed an Instagram feed on this website.

How long information is kept

Enquiry emails are kept in Kelly’s Gmail mailbox and reviewed monthly. At each review, we delete closed enquiries that did not result in a purchase or commission once more than 12 months have passed since the last message. We delete information sooner when it is no longer needed.

We retain only the correspondence still needed for ongoing work, necessary purchase or commission records, legal obligations or a dispute. We reassess that information when the reason for keeping it ends. You can also contact us to request deletion, subject to applicable legal exceptions.

Technical information is subject to the hosting provider’s retention settings and security requirements. Contact us if you would like details about information relating to you.

Your rights

You can ask to access or correct your personal information, request deletion or restriction of its use, and object to processing based on legitimate interests. Where the legal conditions apply, you can also request a portable copy of information you have supplied. These rights are subject to the conditions and exceptions in data protection law.

Send your request to [email protected]. We may need enough information to verify your identity before sharing or changing personal information. We normally respond within one month; if the law allows extra time for a complex request, we will explain this within that month.

You can lodge a complaint with the Dutch Autoriteit Persoonsgegevens or your local data protection authority. We do not use enquiry information for automated decisions or profiling.