1
Cookie preferences

We use cookies to understand how you interact with our site and to improve your experience. Read our Privacy Policy.

EssentialAlways active
AnalyticsUsage & performance
MarketingAds & retargeting

Privacy & Cookie Policy

Last updated: 28 May 2026

1. Who We Are

This website is operated by Alice Nanavova Art Advisory. We are responsible for any personal data collected through this site. For any data protection questions, contact us at info@alicenanavova.com.

2. What We Collect

Contact form. When you fill in our contact form we collect your name, email address, telephone number (optional), area of interest, and the content of your message.

Analytics (with your consent). We use PostHog to collect anonymous data about how people use the site — pages visited, navigation paths, device type, and approximate location at country level. No full IP addresses are stored. No individual is identified.

Marketing (with your consent). If you accept marketing cookies, third-party tools may collect data about your visit to measure the effectiveness of our advertising and to show relevant ads on other platforms. This may include hashed contact information, conversion events, and browsing behaviour on this site.

3. How We Use It

  • To respond to your enquiries and provide art advisory services
  • To understand how visitors use our site so we can improve it (analytics, with consent only)
  • To measure the performance of our advertising and reach people who may be interested in our services (marketing, with consent only)
  • To prevent automated spam submissions to our contact form

We do not sell your personal data. We do not use it for automated profiling or direct marketing without your consent.

4. Lawful Basis

  • Contact enquiries — legitimate interests (responding to a request you initiated)
  • Analytics cookies — your consent, given via the cookie banner
  • Marketing cookies — your consent, given via the cookie banner
  • Spam prevention — legitimate interests in protecting our contact form

5. Cookies & Local Storage

Essential. Strictly necessary for the site to function. We store two values in your browser's local storage: av-cookie-consent (your cookie preferences, kept for two weeks then renewed on each visit) and av-contact-draft (a draft of what you have typed into the contact form so it is not lost on accidental reload). Neither is sent to any server. Both can be cleared from your browser at any time. Cannot be disabled.

Analytics. Used by PostHog to collect anonymous data about how visitors use the site. Only placed after you consent. PostHog processes data on EU servers.

Marketing. Used by Meta Pixel, Google Ads, and LinkedIn Insight Tag to measure advertising conversions and enable retargeting. Only placed after you consent. These tools are provided by Meta Platforms Ireland, Google Ireland, and LinkedIn Ireland respectively.

You can change or withdraw your cookie consent at any time using the Cookie Preferences link in the footer of any page, or by contacting us at info@alicenanavova.com.

6. Third-Party Services

We use the following third-party services. We do not sell your data to any of them.

  • PostHog — analytics. Data stored on EU servers (eu.i.posthog.com). See the PostHog Privacy Policy.
  • Meta Pixel — conversion tracking and retargeting for Facebook and Instagram ads. We act as a joint controller with Meta Platforms Ireland Ltd for data collected via the Pixel. Meta may use this data for its own purposes under its Data Policy. Only active with your marketing consent.
  • Google Ads — conversion tracking for Google advertising campaigns, provided by Google Ireland Ltd. Only active with your marketing consent. See Google's Privacy Policy.
  • LinkedIn Insight Tag — conversion tracking and audience insights for LinkedIn campaigns, provided by LinkedIn Ireland Unlimited Company. We act as a joint controller with LinkedIn for data collected via the Insight Tag. Only active with your marketing consent. See LinkedIn's Privacy Policy.
  • Cloudflare Turnstile — bot protection for our contact form, provided by Cloudflare, Inc. Cloudflare processes browser signals to verify you are human. No data from this process is retained by us. See the Cloudflare Privacy Policy.
  • Cloudflare DNS — authoritative DNS for this domain, provided by Cloudflare, Inc. When your device looks up the domain name, your DNS resolver contacts Cloudflare's nameservers. Cloudflare receives the DNS query but is not in the path of your HTTPS request itself — it does not see your full IP in a session context, your user agent, or the page you visit. See Cloudflare's GDPR statement.
  • Brevo — transactional email delivery for the contact form, provided by Sendinblue SAS (trading as Brevo), based in France. When you submit the contact form, Brevo sends a notification email to us and an auto-reply confirmation to you. Brevo processes the data (name, email, phone, interest, message) only for the purpose of delivering these emails. See the Brevo Privacy Policy.
  • Google Firebase — website hosting and contact-form backend (Cloud Functions), provided by Google Ireland Ltd. Firebase may log server access data including IP addresses for security purposes. See Google's Privacy Policy and the Firebase Data Processing Addendum.

7. International Data Transfers

PostHog processes analytics data within the EU — no transfer outside the EEA occurs for analytics. Where other services (Cloudflare, Google, Meta, LinkedIn) transfer data outside the UK or EEA, such transfers are covered by Standard Contractual Clauses or equivalent safeguards.

8. How Long We Keep Your Data

  • Contact form enquiries — up to six years from the date of your enquiry
  • Analytics data (PostHog) — one year by default
  • Meta Pixel conversion data — up to 180 days (Meta default)
  • Google Ads conversion data — up to 90 days (Google default)
  • LinkedIn Insight Tag data — up to 90 days (LinkedIn default)
  • Spam prevention (Turnstile) — processed ephemerally at form submission, not retained by us
  • Brevo transactional email logs — retained by Brevo per their service defaults (typically 30 days for delivery logs)
  • Firebase Hosting access logs — retained by Google for a limited period for security and abuse-prevention purposes

9. Your Rights

You have the right to access, correct, or delete your personal data; to restrict or object to how we process it; to receive a portable copy of it; and to withdraw consent at any time.

To exercise any of these rights, email us at info@alicenanavova.com. We will respond within one month.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be published on this page with an updated date at the top. Where changes are material we will place a notice on the website.

11. Contact Us

Alice Nanavova Art Advisory
info@alicenanavova.com