Privacy Policy

Draft compliant with revFADP (in force since September 2023). Legal review required. [LEGAL REVIEW REQUIRED]

Data controller: [Company TBD], [address], [email]. Purpose: operating the platform, payment processing, matchmaking, transactional email. Categories of data: email, name, shipping address, images of artworks/venues, payment identifiers (Stripe — card and TWINT data is processed exclusively by Stripe). Recipients: Stripe Payments Europe (Ireland), Resend, hosting provider. Retention: for the duration of the account, then per legal retention requirements (accounting: 10 years). Your rights: access, rectification, deletion, portability, objection. Requests to [email]. Cookies: only essential ones (session, language preference). Analytics via Plausible (cookieless).