Privacy Policy

Last updated: 2026-09-05.

Controller

What we collect

We collect information needed to run the gallery and fulfil orders: name, email, mobile phone number, shipping address, cart contents, order history, voucher use, payment status, and messages you send to us.

Why we use it

We process this data to provide the shop, prepare and ship orders, respond to enquiries, prevent fraud, maintain security, meet tax/accounting duties, and improve the website where you have given consent.

Payments and processors

Payments are processed by Stripe. We do not store full card details on this website. Hosting, email, payment, shipping, and technical providers may process data only as needed to provide their services.

Cookies

Strictly necessary cookies support cart, CSRF security, language choice, and admin access. Optional analytics and marketing storage are disabled unless you consent in the cookie preferences panel.

Google Analytics

If you accept analytics cookies, we use Google Analytics 4 to collect aggregated usage data such as page views, device/browser information, approximate location, and interactions with the website. We use this information to understand how visitors use the site and improve content, navigation, and shop performance. Google Analytics is not enabled until analytics consent is granted. You can opt out or withdraw consent at any time through the cookie preferences panel in the footer or by using browser/privacy tools that block analytics.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing where applicable. You may withdraw consent at any time. You may also complain to your local data protection authority.

Retention

Order and accounting records are retained as required by law. If you delete your account, your login profile, saved addresses, cart, likes, sessions, and security tokens are removed. Paid, shipped, refunded, or return-related order records may remain where needed for accounting, tax, fraud prevention, shipping, refunds, returns, and legal obligations; abandoned unpaid orders are detached and scrubbed of contact and shipping details. Enquiries and technical logs are kept only as long as reasonably needed for the purposes above.

Auction participation

For timed auctions, we process your public bidder alias, bid amounts and times, account identifier, client IP and forwarded IP information for operation, audit, fraud prevention and dispute handling. We derive a country-level location from the bid IP and display that country beside each public bid; the exact IP, your name, email and card details remain private. Stripe performs card verification and we retain only opaque Stripe references, never full card data. When you accept the auction terms, we retain the accepted version and text, language, time, account and authorization references, IP information, browser details, and integrity hashes as evidence of the agreement.