Privacy Policy
Last updated: 10 July 2026
This Privacy Policy explains how personal data is collected, used, and protected when you visit feishanhsieh.com (the "Site"), which presents the work of the artist Feishan Hsieh.
We collect as little personal data as possible and handle it transparently, in accordance with the EU General Data Protection Regulation (GDPR) and applicable French data protection law.
1. Who is responsible for your data
The data controller for this Site is:
Feishan Hsieh
85 rue Périer, 92120 Montrouge, France
Email: contact@feishanhsieh.com
If you have any question about this policy or about how your data is handled, you can reach us at the email address above.
2. What data we collect
Information you give us directly
When you send a message through the contact form, we collect your name, your email address, and the content of your message.
Information collected automatically
The Site is built and hosted on Squarespace. When you visit, Squarespace automatically records technical data — including your IP address, browser and device type, the page that referred you, and the date and time of your visit — to keep the Site secure and running.
Squarespace's built-in analytics collects data about how visitors use the Site (such as pages viewed and time on the Site), using cookies. This helps us understand which work draws attention and how people move through the Site.
Content embedded from other services
Some pages embed content from Instagram. When this content loads, Instagram and its parent company Meta may collect data about you as though you had visited Instagram directly, including through their own cookies. We do not control their data practices; Meta's own privacy policy applies.
Platform and fonts
Because the Site runs on Squarespace, Squarespace may load fonts and other display resources (for example through Google Fonts or Adobe Fonts) to render the pages. When this happens, your IP address may be shared with those providers as the resource is served.
3. Why we use your data, and our legal basis
We process personal data only for these purposes:
To respond to your messages — legal basis: steps taken at your request, and our legitimate interest in replying to people who contact us.
To keep the Site secure and working — legal basis: our legitimate interest in operating a safe, reliable website.
To understand and improve how the Site is used (analytics) — legal basis: your consent.
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Cookies
This Site uses cookies. Some are strictly necessary to make the Site function and are always active. Others are non-essential — in particular the cookies used by Squarespace's analytics and by embedded Instagram content — and are only used with your consent.
On your first visit you can accept or refuse non-essential cookies through the cookie banner, and you can change your choice at any time. You can also manage or delete cookies through your browser settings. If you refuse non-essential cookies, the Site will still work, though some embedded content may not display.
5. Who we share your data with
We do not sell your personal data. We share it only with the providers that make the Site possible:
Squarespace — hosting, platform, contact-form handling, and built-in analytics. Squarespace acts as our processor.
Meta / Instagram — for content embedded from Instagram, which those services deliver directly to your browser.
We may also disclose data where we are legally required to do so.
6. International data transfers
Some of these providers — including Squarespace and Meta — may process data outside the European Economic Area, in particular in the United States. Where that happens, the transfer is protected by appropriate safeguards, such as an adequacy decision by the European Commission or the Commission's Standard Contractual Clauses.
7. How long we keep your data
Contact-form messages: kept for as long as needed to handle your enquiry and for a reasonable period afterwards, then deleted — up to 3 years.
Server logs: kept for a limited period, up to 12 months, then deleted or anonymized.
Analytics data: retained in line with Squarespace's stated retention periods.
8. Your rights
Under the GDPR, you have the right to:
access the personal data we hold about you;
rectify data that is inaccurate or incomplete;
erase your data ("right to be forgotten");
restrict or object to certain processing;
portability — receive your data in a structured, commonly used format;
withdraw consent at any time, where processing is based on consent (this does not affect processing already carried out);
lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at contact@feishanhsieh.com. We will respond within one month. We may ask you to confirm your identity before acting on a request.
If you believe your data has been handled improperly, you may lodge a complaint with the French data protection authority — the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr — or with the supervisory authority in your own country.
9. How we protect your data
We rely on the technical and organizational security measures provided by Squarespace, and we limit access to the data we hold. No method of transmission or storage is completely secure, but we take care to keep your data safe.
10. Children's privacy
This Site is not directed at children, and we do not knowingly collect personal data from anyone under the age of 15. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time — for example, if the Site adds new features or tools. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be signalled clearly on the Site.
12. Contact
For any question about this policy or about your personal data:
Feishan Hsieh
Email: contact@feishanhsieh.com
85 rue Périer, 92120 Montrouge, France