Privacy Policy

Effective date: August 27, 2026
Last updated: August 27, 2026

This Privacy Policy explains how Natalia Lvova, doing business as Nala Kun ("Nala Kun," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit https://nalakun.com and its related pages (collectively, the "Site"), contact us, enquire about an artwork, or subscribe to email updates.

1. Information We Collect

Information You Provide

Depending on how you interact with the Site, you may provide:

Your name, email address, and optional telephone number;
Messages submitted through the “Let’s Talk” form;
Artwork enquiry information, including your message, the relevant artwork name, and the URL of the artwork page;
Newsletter subscription information, including your email address, consent status, confirmation status, and subscription preferences;
Information included in emails or other communications you send to us; and
Any other information you choose to provide voluntarily.

Please do not submit sensitive personal information through the Site’s forms.

The Site does not process payments or collect payment-card information. Visitors may submit an enquiry about an artwork, but purchases are not completed directly through the Site.

Information Collected Automatically

When you visit the Site, we and our service providers may automatically receive limited technical information, including:

Internet Protocol (IP) address;
Browser type and version;
Device type and operating system;
Referring page or website;
Pages viewed and the date and time of a visit;
General or approximate location derived from an IP address;
Site performance, security, and diagnostic information;
Server and security logs; and
Cookie-consent preferences and information stored through cookies, browser local storage, pixels, or similar technologies.

Some technical information may be collected in server logs even when optional technologies are disabled.

Information From Service Providers

We may receive information from service providers that help us operate the Site. For example, Webflow may process form submissions and technical information needed to host, secure, and maintain the Site. Mailchimp may provide subscription, confirmation, delivery, open, and link-click information related to email campaigns.

2. How We Use Information

We may use personal information to:

Respond to questions and messages submitted through the “Let’s Talk” form;
Respond to enquiries about a specific artwork;
Communicate about artwork availability, exhibitions, commissions, sales, shipping, or other matters you ask about;
Send newsletters and email updates when you have subscribed;
Maintain records of requests, consent, subscriptions, and unsubscribes;
Measure email campaign delivery and engagement;
Operate, maintain, secure, and troubleshoot the Site;
Detect and prevent spam, fraud, abuse, and security incidents;
Understand Site performance and improve its content and usability;
Comply with legal obligations and protect our legal rights; and
Carry out another purpose disclosed to you when the information is collected.

Submitting a “Let’s Talk” or “Enquire” form does not add you to our marketing list. You will receive marketing emails only if you separately choose to subscribe.

If you submit the “I’m Interested” form, we may send you occasional emails about new artworks, exhibitions, studio news, events, and other occasional announcements.

We use Intuit Mailchimp to manage subscriptions and send email campaigns. We use a double opt-in process: after submitting the subscription form, you must confirm your email address before you are added as a subscribed contact.

Mailchimp may collect campaign delivery information and measure email opens and link clicks. Open tracking may use a small, invisible image embedded in an email. Click tracking may use tracked links that pass through Mailchimp before directing you to the intended page. These measurements may be affected by email-client privacy features, image blocking, security software, and automated activity and therefore may not always be accurate.

You can unsubscribe at any time by selecting the unsubscribe link included in each marketing email or by submitting a request through our Contact page. Unsubscribing from marketing messages will not prevent us from responding to an enquiry you initiated or sending non-marketing communications necessary to address your request.

4. How We Disclose Information

We may disclose personal information only as reasonably necessary for the purposes described in this Privacy Policy.

Service Providers

Service providers may include:

Webflow, which provides website hosting, content management, form processing, security, and related technical services;
Intuit Mailchimp, which provides newsletter subscription, consent-management, email delivery, and campaign-reporting services;
Finsweet, which provides technical components used by the Site, including the Instagram Feed component;
Meta / Instagram, when the Site retrieves public Instagram content or when you follow a link to Instagram;
Cloudinary, which may deliver video or image media used on the Site;
Content-delivery services used to deliver code libraries, fonts, images, and other Site assets; and
Email, security, anti-spam, maintenance, and professional service providers used to operate the Site and respond to requests.

These providers may process information under their own privacy terms and in locations outside your state or country.

Authorized Access

Form submissions may be accessed by Nala Kun, authorized website administrators, and relevant service providers only as reasonably necessary to operate the Site, respond to requests, maintain security, or provide technical support.

Legal and Safety Disclosures

We may disclose information when reasonably necessary to comply with applicable law, legal process, or a valid governmental request; protect the rights, safety, and security of visitors, Nala Kun, or others; investigate fraud or abuse; or establish, exercise, or defend legal claims.

Business Changes

If the operation of the Site or related business is transferred, reorganized, or combined with another organization, information may be disclosed as part of that transaction, subject to applicable law.

5. No Sale or Targeted Advertising

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising, and we do not use information submitted through the Site’s forms to create advertising profiles.

If these practices change, we will update this Privacy Policy and provide any choices required by law before the change applies.

6. Cookies and Similar Technologies

The Site and its service providers may use cookies, browser local storage, pixels, and similar technologies for:

Security, network management, spam prevention, and form functionality;
Remembering cookie-consent preferences and other settings;
Providing optional Site features and third-party content;
Measuring Site performance and interactions; and
Measuring delivery, opens, and link clicks in email campaigns.

Where required by law, optional technologies will not be activated until you make a choice through the Site’s cookie notice. You may withdraw or change that choice through the cookie settings made available on the Site. Strictly necessary technologies may remain active because the Site may not operate properly without them.

You can also control cookies through your browser settings. Blocking some technologies may affect Site functionality.

Email tracking technologies operate within marketing emails and are separate from cookies placed on the Site.

Do Not Track and Global Privacy Control

Some browsers transmit “Do Not Track” signals. Because there is no universally accepted standard for responding to these signals, the Site does not currently respond differently to them.

Where legally required and technically applicable, we will treat a recognized Global Privacy Control signal as a request to opt out of the sale or sharing of personal information. Because we do not currently sell personal information or share it for cross-context behavioral advertising, such a signal does not change our current practices.

Third-party providers may collect information when you interact with their embedded content, links, or services. Their collection and use of information are governed by their own privacy policies.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security, and dispute-resolution needs.

Unless a longer period is reasonably necessary or required by law, our intended retention periods are:

“Let’s Talk” submissions and related correspondence: 24 months after the last communication;
Artwork enquiries and related correspondence: 36 months after the last communication;
Newsletter subscription records: for as long as you remain subscribed;
Unsubscribe and suppression records: for as long as reasonably necessary to honor your choice; and
Technical and security logs: according to the retention schedules of the relevant service providers or for as long as reasonably necessary for security and troubleshooting.

We may retain information longer when necessary to comply with law, resolve a dispute, prevent fraud, or establish, exercise, or defend legal claims.

8. Data Security

We use reasonable administrative and technical measures designed to protect personal information. The Site uses encrypted HTTPS connections, and access to form submissions and service accounts is limited to people who need that access.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security. Please avoid submitting confidential or sensitive information through ordinary website forms or email.

9. Your Privacy Choices and Rights

Depending on where you live and which law applies, you may have the right to request that we:

Confirm whether we process personal information about you;
Provide access to or a copy of your personal information;
Correct inaccurate personal information;
Delete personal information;
Explain the categories of information collected and disclosed;
Restrict or object to certain processing;
Honor a withdrawal of consent; or
Provide information in a portable format.

You may unsubscribe from marketing emails at any time.

To make a privacy request, use our Contact page and write “Privacy Request” at the beginning of your message. Please describe your request and provide enough information for us to identify the relevant records. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.

These rights are not absolute. We may deny or limit a request where permitted by law, including when information must be retained for security, legal compliance, recordkeeping, or the establishment or defense of legal claims.

California Residents

This Privacy Policy is intended to provide notice of the categories of personal information we collect, the purposes for which we use it, the categories of recipients to whom it may be disclosed, and the choices available to visitors.

If the California Consumer Privacy Act, as amended, applies to us, California residents may have additional rights to know, access, correct, or delete personal information and to opt out of certain sales or sharing. As explained above, we do not currently sell personal information or share it for cross-context behavioral advertising. If that law applies to us, we will make available any additional methods for submitting requests that it requires.

We do not disclose personal information to third parties for their own direct-marketing purposes without consent.

10. International Visitors and Data Transfers

The Site is operated from California, United States. Our service providers may process information in the United States and other countries. These countries may have privacy laws that differ from those where you live.

Where applicable law requires additional safeguards for an international transfer, we or the relevant service provider will use an appropriate legal mechanism.

The Site contains links to third-party websites and services, including Instagram and other social media platforms. When you follow a third-party link, that service may collect information under its own privacy policy. We do not control and are not responsible for third-party privacy or security practices.

Displaying public social media content on the Site does not mean that information submitted through the Site’s forms is shared with the social media platform.

12. Children’s Privacy

The Site is not directed to children under 13 or intended specifically for minors under 18. We do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information through the Site, please contact us through our Contact page so that we can review and, where appropriate, delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Site, our services, legal requirements, or privacy practices. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

If a change materially affects how previously collected personal information is used, we will provide additional notice or request consent where required by law.

14. Contact Us

For questions about this Privacy Policy or our privacy practices, or to submit a privacy request, contact:

Natalia Lvova
Doing business as Nala Kun
California, United States
Online contact form