Privacy policy
PRIVACY POLICY
Effective date: 12 July 2026
Last updated: 12 July 2026
Nathan Downie trading as Nashīnasu ナシーナス (“Nashīnasu”, “we”, “us” or “our”) operates this website and store to present and sell artworks, editions and related services, administer private commissions, respond to enquiries and operate Nashīnasu Kazoku.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit the website, purchase a work, submit an enquiry, apply for Kazoku, communicate with us or otherwise interact with Nashīnasu.
Where this Privacy Policy conflicts with another policy concerning the handling of personal information, this Privacy Policy applies to that handling.
1. Who we are
For the purposes of UK data-protection law, the data controller is:
Nathan Downie trading as Nashīnasu ナシーナス
Privacy enquiries: enquiries@nashinasu.com
Postal address: 483 Green Lanes, London, N13 4BS, United Kingdom
2. Personal information we collect
The information collected depends on how you interact with Nashīnasu.
Contact and identity information
This may include:
- name;
- email address;
- telephone number;
- billing and delivery address;
- country or region;
- organisation and professional role, where relevant.
Order and transaction information
This may include:
- works or services purchased;
- order history;
- payment status and transaction references;
- delivery and insurance information;
- customs or import information;
- returns, claims and service history.
Payment providers process complete payment-card or bank details. We do not ordinarily receive or store complete card information.
Enquiry and commission information
This may include:
- messages and correspondence;
- artwork or commission interests;
- intended placement or environment;
- proposed dimensions, materials or artistic direction;
- project requirements;
- records of discussions and decisions.
Kazoku application and membership information
Where you apply for or join Nashīnasu Kazoku, this may include:
- application responses;
- referral source;
- existing relationship with Nashīnasu;
- existing Nashīnasu ownership;
- collector preferences and interests;
- preferred scale, materials and visual direction;
- edition, original-work and commission interests;
- placement environment;
- approximate acquisition range where voluntarily supplied;
- application, waitlist, acceptance and renewal records;
- active membership and tenure history;
- private opportunities or materials presented;
- confidentiality, security or conduct records where relevant.
This information is used to assess fit, administer membership and make private collector opportunities more relevant. It does not guarantee acceptance, access to a particular work or a successful acquisition.
Communications
We may retain:
- emails;
- Concierge submissions;
- support requests;
- cancellation notices;
- complaints;
- records of telephone or other communications where appropriate.
Website, device and usage information
This may include:
- IP address;
- browser and device type;
- operating system;
- general location derived from an IP address;
- pages viewed;
- referring website;
- checkout and site interactions;
- cookie identifiers and similar technical information.
Marketing preferences
This may include:
- whether you have opted into marketing;
- the communications requested;
- consent records;
- unsubscribe or objection records.
3. How we obtain personal information
We may obtain information:
- directly from you;
- automatically through the website and related technologies;
- from payment, fraud-prevention, shipping and ecommerce providers;
- from a person who refers or introduces you, where appropriate;
- from publicly available professional sources where reasonably necessary for security, fraud prevention, due diligence or assessing a high-value transaction.
Where information is obtained from another source, we will handle it in accordance with applicable law.
4. How we use personal information and our lawful bases
We use personal information only where we have an appropriate lawful basis.
Orders, commissions and contractual services
Lawful basis: contract or steps taken at your request before entering a contract.
We use information to:
- process and administer orders;
- issue invoices and payment requests;
- prepare and deliver works;
- communicate order updates;
- administer commissions;
- handle delivery issues, returns, claims and remedies;
- provide customer or collector support.
Kazoku applications and membership
Lawful basis: contract, steps taken at your request before entering a contract, and legitimate interests.
We use information to:
- assess applications and referrals;
- decide whether to accept, waitlist or decline an applicant;
- administer active membership;
- maintain collector records;
- improve the relevance of private circulation;
- manage renewals;
- protect confidentiality, security and programme integrity.
Enquiries and relationship management
Lawful basis: legitimate interests, contract or steps taken at your request.
We use information to:
- respond to enquiries;
- maintain continuity in collector and institutional relationships;
- assess acquisition or commission suitability;
- keep appropriate records of important communications.
Website operation, security and fraud prevention
Lawful basis: legitimate interests and, where applicable, legal obligation.
We use information to:
- operate and secure the website;
- prevent fraud, abuse and unauthorised access;
- investigate suspicious transactions;
- protect Nashīnasu, customers, members and service providers;
- enforce contractual and intellectual-property rights.
Legal, tax and regulatory compliance
Lawful basis: legal obligation and legitimate interests.
We use information to:
- maintain accounting and tax records;
- respond to lawful requests;
- establish, exercise or defend legal claims;
- comply with regulatory and legal obligations.
Marketing
Lawful basis: consent or, where legally permitted, legitimate interests and the electronic-marketing soft opt-in.
Where permitted, we may send information about:
- artwork releases;
- editions;
- exhibitions or presentations;
- commissions;
- Kazoku;
- other relevant Nashīnasu developments.
You may unsubscribe at any time.
Service messages relating to an order, application, membership, security matter or legal notice are not marketing and may still be sent where necessary.
5. Legitimate interests
Where we rely on legitimate interests, those interests may include:
- operating and developing an artist-led practice;
- maintaining collector and client relationships;
- improving the relevance of communications;
- protecting confidential work and private access;
- preventing fraud and misuse;
- maintaining records;
- protecting legal and intellectual-property rights.
We consider whether these interests are proportionate and whether they are overridden by your rights and interests.
6. How we share personal information
We disclose personal information only where reasonably necessary.
Recipients may include:
- Shopify and related ecommerce services;
- payment processors;
- banks and payment-service providers;
- shipping, logistics, customs and insurance providers;
- website hosting, IT and security providers;
- analytics and cookie-management services;
- email and customer-communication providers;
- professional advisers, accountants or legal advisers when engaged;
- regulators, courts, law-enforcement bodies or public authorities where legally required;
- parties involved in a genuine restructuring, transfer or sale of the practice, subject to appropriate safeguards.
We do not disclose personal information merely in exchange for payment.
7. Shopify
The store is hosted and supported by Shopify.
Shopify may process information including:
- browsing and device information;
- account and checkout information;
- payment and transaction information;
- order history;
- interactions with the store and Shopify services.
Shopify may process personal information in other countries and in accordance with its own privacy notices, contractual arrangements and the services enabled on this store.
Some Shopify features may use information from interactions with Shopify or other merchants. The exact processing may depend on the Shopify services and privacy settings enabled at the time.
8. Cookies and similar technologies
We and our service providers may use cookies, pixels, local storage and similar technologies for purposes including:
- essential website operation;
- security and fraud prevention;
- remembering settings;
- checkout functionality;
- performance measurement;
- analytics;
- marketing, where enabled and permitted.
Strictly necessary technologies may operate without consent where the law permits.
Where consent is required, non-essential technologies will not be used until you make an appropriate choice through the site’s privacy or cookie controls.
You may later withdraw or change your choice through those controls. Browser controls may also allow you to delete or restrict cookies, although doing so may affect site functionality.
Further details may be provided in a separate Cookie Policy or cookie-preferences panel.
9. International transfers
Some service providers may process personal information outside the United Kingdom or European Economic Area.
Where a restricted transfer occurs, we or the relevant service provider will use an appropriate transfer mechanism where required, which may include:
- UK adequacy regulations;
- the UK International Data Transfer Agreement;
- the UK Addendum to the EU Standard Contractual Clauses;
- another legally recognised safeguard.
You may contact us for further information about relevant transfer safeguards.
10. Data retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy.
Indicative periods include:
Order, transaction and accounting records
These are generally retained for the period required by tax, accounting and legal obligations. For a self-employed business, this will commonly be at least five years after the relevant Self Assessment filing deadline.
Active customer and collector relationships
Information may be retained for the duration of the relationship and for a reasonable period afterwards to maintain order history, provenance, service continuity, dispute records and legal protection.
Kazoku applications
Unsuccessful or withdrawn application records may be retained for a limited period where reasonably necessary for security, capacity management, reapplication handling and record continuity.
Marketing records
Marketing consent and unsubscribe records may be retained while marketing continues and afterwards where necessary to respect an opt-out or demonstrate compliance.
Routine enquiries
Routine enquiries may be deleted when no longer required, unless they relate to a transaction, dispute, safety issue, collector relationship or legal obligation.
Retention may be extended where information is required for litigation, fraud prevention, regulatory investigation or another lawful purpose.
11. Your rights
Depending on applicable law, you may have the right to:
- obtain confirmation that we process your information;
- request access to it;
- correct inaccurate or incomplete information;
- request deletion;
- request restriction of processing;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- request data portability where applicable;
- withdraw consent where processing relies upon consent;
- complain to a supervisory authority.
These rights may be subject to legal conditions and exceptions.
To exercise a right, contact:
We may need to verify your identity. We will normally respond without undue delay and within the period required by law.
12. Automated decision-making
State whichever version is true:
Where you do not use it
We do not currently use solely automated decision-making that produces legal or similarly significant effects upon individuals.
Where Shopify or another fraud service may make such decisions
You will need wording explaining:
- what automated process is used;
- its significance;
- expected consequences;
- how the individual can request human review.
Do not publish the first version unless it is accurate across Shopify, payments and fraud-prevention tools.
13. Children
The website, store and Kazoku membership are not directed at children.
We do not knowingly collect personal information from children for membership or purchasing purposes.
Where we become aware that personal information has been collected unlawfully from a child, we will take appropriate steps to delete or otherwise address it.
14. Security
We use reasonable technical and organisational measures intended to protect personal information from unauthorised access, misuse, loss, alteration or disclosure.
No system or transmission method can be guaranteed completely secure.
Please do not send unnecessary sensitive or confidential information through unsecured channels.
15. Third-party websites
The website may contain links to independent third-party websites or services.
Their privacy practices are governed by their own notices, and we are not responsible for their independent processing.
16. Complaints
Please contact us first if you have a concern:
You may also complain to the UK Information Commissioner’s Office.
Nothing in this section prevents you from contacting the ICO directly.
17. Changes to this Policy
We may update this Privacy Policy to reflect changes in law, technology, service providers or how Nashīnasu operates.
The current version will be published on the website with an updated revision date.
Where a change is material, we may provide additional notice where appropriate.