Privacy Policy Last updated: March 16, 2026 Effective date: March 16, 2026

Arnold Szmerling (“I”, “me”, “my”, “Visual Legacy Artist”) operates the website https://asip.co (the “Website”).

I am committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how I collect, use, store, share and protect personal information when you interact with the Website, submit an enquiry form, or otherwise provide information to me.

This Policy complies with the Israeli Privacy Protection Law 5741-1981 (as amended, including Amendment 13), the European Union General Data Protection Regulation (GDPR) where applicable, and the Australian Privacy Act 1988 (including the Australian Privacy Principles — APPs).

1. Who is responsible for your personal information? Arnold Szmerling Visual Legacy Artist Based in Israel Email: [insert your contact email]

2. What personal information do I collect? I collect only the minimum information necessary for responding to your enquiry:

• Full name
• Email address
• Phone number / WhatsApp number (optional)
• Message content (including any details you voluntarily provide)
• How you heard about me (optional — e.g., Guardian name)

I do not collect sensitive personal information (e.g., health, religion, ethnicity, biometric data) unless you voluntarily include it in your message, in which case I process it only to respond to your enquiry.

3. How do I collect your personal information? Directly from you when you:

• Submit the private enquiry form on the Website
• Email me directly
• Provide details via WhatsApp (only for established contacts)

I do not use cookies for tracking or advertising. The Website uses minimal technical cookies (e.g., session management) and Google reCAPTCHA v3 (invisible spam protection).

4. Why do I collect and use your personal information? (Purpose & legal basis) I process your information only to:

• Respond to your enquiry or request for information about Lifestyle Legacy Portraiture or PPL Prints
• Schedule a consultation (if appropriate)
• Maintain records of legitimate business communications

Legal bases (where relevant):

• Israel PPL: Legitimate interest (responding to business enquiries) + consent (where you provide details voluntarily).
• GDPR (if you are in EU/EEA): Legitimate interests (Art. 6(1)(f)) — responding to your contact request; or consent (Art. 6(1)(a)) where you explicitly submit information.
• Australian Privacy Act / APPs: APP 3 (collection only when reasonably necessary) and APP 5 (notification via this policy).

5. Who do I share your personal information with? I do not sell, rent or trade your information. I may share it only with:

• My email provider / hosting provider (for storage and transmission)
• Legal authorities if required by law (court order, etc.)

No transfers occur to countries without adequate protection unless necessary for email/hosting (covered by standard contractual clauses or adequacy decisions where applicable).

6. How long do I keep your personal information? Only as long as necessary:

• Enquiry data: retained for up to 24 months (or until you request deletion) to allow follow-up
• If no ongoing relationship: deleted after 12 months of inactivity

You may request deletion earlier (see rights below).

7. Your rights Depending on your location and applicable law, you may have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion (“right to be forgotten” under GDPR / Israeli PPL)
• Restrict processing
• Object to processing
• Withdraw consent (where processing is consent-based)

To exercise any right, contact me at [your email]. I will respond within 30 days (or 45 days under Australian law if applicable). No fee is charged unless requests are manifestly unfounded or excessive.

8. Security I use reasonable technical and organizational measures to protect your information (secure hosting, limited access, encryption where appropriate). However, no transmission over the internet is 100% secure.

9. International transfers As I am based in Israel, your data may be processed there or in countries where my service providers are located (e.g., email/hosting providers in the US/EU). Israel is recognized as providing adequate protection under GDPR (adequacy decision). For other transfers, I rely on standard contractual clauses or other safeguards.

10. Children The Website is not directed at children under 16. I do not knowingly collect data from children.

11. Changes to this Policy I may update this Policy. Changes will be posted here with an updated “Last updated” date. Significant changes may be notified via email if I have your contact details.

12. Contact For questions, complaints or rights requests: Email: [insert your email] I aim to resolve issues promptly. If unsatisfied, you may contact:

• Israel: Privacy Protection Authority (ppa.gov.il)
• EU/EEA: Your local Data Protection Authority
• Australia: Office of the Australian Information Commissioner (oaic.gov.au)

By using the enquiry form or contacting me, you acknowledge this Privacy Policy.