Vyasna

Last Updated: 7 August 2026

This Privacy Policy describes how Vyasna ("Vyasna", "we", "our", "us") collects, uses and discloses personal data when you visit our online shop or otherwise interact with us (collectively, the "Services").

Vyasna is an independent art project run by an individual artist based in the European Union, and acts as the data controller for the personal data described in this Policy. For any question or request concerning your personal data, contact us at legal@infesum.com. Requests relating to orders, payments or shipping may also be sent to our e-commerce provider at vyasna-shop@support.fourthwall.com, and we will work with them to action your request.

1. WHAT DATA WE COLLECT

Data you provide

- Order information — when you place an order: your name, email address, shipping address and, where required for delivery, phone number.
- Payment information — payment card and billing details are collected and processed directly by our payment providers. We do not receive or store full card numbers.
- Transaction information — the products ordered, order value and date.
- Account information — where you create an account: your name, email address and account credentials.
- Digital downloads — where a product includes digital files such as phone wallpapers, your email address is used to deliver the download link with your order confirmation.
- Communications — the content of messages you send us, and your name and contact details.

Providing this data is voluntary, but without it we cannot process an order or respond to your enquiry.

Data collected automatically

- Log data — IP address, browser type and settings, date and time of your visit.
- Usage data — pages viewed, actions taken and how you navigate the Services.
- Device data — device type, operating system and similar technical identifiers.
- Approximate location — inferred from your IP address at country or region level.

Cookies and similar technologies

We use cookies that are strictly necessary for the Services to function (for example, to keep items in your basket and to secure the checkout). These are set without consent, as permitted by law.

Any non-essential cookies are set only after you give consent through the cookie banner. You may withdraw or change your consent at any time through the cookie settings on our site, and you may also block or delete cookies in your browser settings. Disabling essential cookies may prevent parts of the Services from working.

We do not use advertising or marketing trackers, we do not run analytics or advertising pixels, and we do not run targeted advertising campaigns based on your browsing behaviour.

2. WHY WE USE YOUR DATA, AND ON WHAT LEGAL BASIS

Processing and delivering your order, handling returns and refunds — performance of a contract

Delivering digital files included with a product — performance of a contract

Responding to your questions and providing support — performance of a contract / legitimate interests

Operating, securing and improving the Services — legitimate interests

Preventing fraud and misuse — legitimate interests

Setting non-essential cookies — consent

Keeping accounting and tax records, and complying with other legal duties — legal obligation

Where we rely on legitimate interests, we have assessed that our interest in running and protecting a small independent shop does not override your rights and freedoms.

Where we rely on consent, you may withdraw it at any time, free of charge. Withdrawal does not affect the lawfulness of processing carried out beforehand.

3. WHO WE SHARE DATA WITH

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

We disclose personal data only to:

- our e-commerce and fulfilment provider, Fourthwall, Inc. (United States), which operates the shop platform, processes orders, arranges production and shipping, delivers digital files, and provides customer support on our behalf;
- payment providers, which process your payment and carry out fraud checks;
- shipping and logistics partners, to the extent needed to deliver your order;
- authorities or advisers, where disclosure is necessary to comply with the law, respond to lawful requests, or establish, exercise or defend legal claims;
- a successor, in the event that the project is transferred to another person or entity, subject to this Policy.

These recipients act as our processors or as independent controllers under their own terms, and are bound to protect your data.

4. INTERNATIONAL TRANSFERS

Some of our providers, including Fourthwall, Inc., are located in the United States. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards recognised under the GDPR — such as the European Commission's Standard Contractual Clauses or an adequacy decision — so that your data continues to receive an equivalent level of protection. You may request further information about these safeguards at legal@infesum.com.

5. HOW LONG WE KEEP DATA

We keep personal data only as long as necessary for the purposes described above:

- order and transaction data — for the period required by applicable accounting and tax law;
- account data — while your account is active, and for a short period afterwards;
- correspondence — for as long as needed to handle your matter and for a reasonable period afterwards;
- technical logs — for a short retention period for security and diagnostics.

After these periods, data is deleted or irreversibly anonymised.

6. YOUR RIGHTS

Subject to the conditions set out in the GDPR, you have the right to:

- access your personal data and obtain a copy of it;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten");
- restrict processing in certain circumstances;
- object to processing based on legitimate interests, and to direct marketing at any time;
- data portability — receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller;
- withdraw consent at any time, where processing is based on consent;
- lodge a complaint with the data protection supervisory authority of the EU country where you live, work, or where you believe an infringement occurred.

To exercise any of these rights, write to legal@infesum.com. Where a request concerns order, payment or delivery data, we will action it together with Fourthwall, who process that data on our behalf. We reply within one month; where a request is complex, we may extend this period by up to two further months and will tell you if we do. We may ask for information needed to confirm your identity before acting on a request.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

7. CHILDREN

The Services are not directed to children. We do not knowingly collect personal data from anyone under 16 years of age, or under the age of digital consent applicable in your country. If you believe a child has provided us with personal data, contact us at legal@infesum.com and we will delete it.

8. SECURITY

We use technical and organisational measures designed to protect personal data against loss, misuse and unauthorised access, and we work with providers that maintain their own security standards. However, no transmission or storage of data over the internet can be guaranteed to be completely secure.

9. LINKS TO OTHER SITES

The Services may link to websites or services we do not operate — for example social platforms or streaming services. This Policy does not apply to them. We encourage you to read their privacy policies before providing personal data.

10. CHANGES TO THIS POLICY

We may update this Policy to reflect changes in the law, in our providers or in how the Services work. The date at the top shows when it was last revised. Where changes are significant, we will make this clear on the Services.

11. CONTACT

Questions about this Privacy Policy or about how your data is handled:

Vyasna — legal@infesum.com
Order, payment and delivery matters — vyasna-shop@support.fourthwall.com