Legal
Privacy
The business that operates this site is responsible for the personal data collected here, from Kuala Lumpur, Malaysia. This page sets out what is collected, why, how long it is kept and what you can ask for. Because the business is in Malaysia and buyers are worldwide, it is written to meet Malaysian data protection law and the European GDPR alike.
What is collected
Only what an enquiry needs: your name, your email address, the works you have selected, and whatever you choose to write in the message. The forms ask for nothing else. Our host's server logs record the usual technical data — IP address, browser, time of request — for security. There is no checkout here and no card is ever charged, so no payment details are seen or stored.
Why
To reply to you and, if it leads to a sale, to carry that sale out. Keeping invoices and transaction records after that is a legal obligation. Keeping the site secure is a legitimate interest.
No mailing list, no tracking
There is no newsletter, no marketing list, and no advertising or analytics tracking anywhere on this site. Your address is used to answer you, not to market to you. No advertising or analytics cookies are set; the only things stored on your device are a small cookie remembering your language and a local record of your Selection, neither of which leaves your browser.
Who else sees it
Only the providers that make the site work — hosting, email delivery and forwarding, and enquiry storage — each acting on instruction under a data processing agreement, and the artist in France, who sees enquiries about his own work. Your details cross borders between Malaysia, Europe and those providers, under contractual safeguards requiring them to protect your data to an equivalent standard. Nothing is ever sold, rented or passed to anyone else.
How long it is kept
Enquiries that do not lead to a sale are kept for up to three years from our last exchange. Where a sale takes place, invoices and accounting records are kept for seven years, as Malaysian law requires. Server logs are kept for up to a year.
Your rights
You may ask for access to your data, for it to be corrected or erased, for its processing to be restricted or stopped, or for a copy in a portable form. You may object to processing and withdraw any consent you have given. Write to studio@didierbreteau.com and you will have a reply within a month. If you are not satisfied, you can complain to the data protection authority in Malaysia or, if you live in Europe or the UK, to your own national one.
Last updated 14 September 2026.