Privacy Policy
This Privacy Policy explains how ART-GAL, the online studio of Galyna Antonenko in Porto, Portugal, handles personal data when you visit this website, contact us, create an account, or place an order.
Who is responsible for your data?
ART-GAL is responsible for the personal data described in this policy. You can contact us at galyna3.dp@gmail.com or by post at Estr. da Circunvalação 14875, Porto, Portugal.
Data we collect
- Contact details you provide, such as your name, email address, phone number, and message.
- Billing, delivery, and order details needed to process an artwork purchase.
- Account information, such as your username and password, if you create an account.
- Technical information needed to keep the website secure and functional, including device, browser, and website-request information.
- Consent and language-preference information, including whether you chose English or French and the cookie choices you make.
Why we use your data
- To respond to questions, requests, and studio enquiries.
- To process orders, payments, delivery, returns, refunds, and customer support.
- To operate customer accounts and show the website in your selected language.
- To prevent fraud, protect the website, keep records, and comply with legal obligations.
- To send optional updates only where you have asked to receive them or the law otherwise permits it.
Legal bases and sharing
Depending on the situation, ART-GAL processes data because it is necessary to perform a contract, comply with a legal obligation, pursue legitimate interests such as security and customer service, or because you have given consent. We share only the information needed with service providers that help operate the store, such as hosting, payment, delivery, email, security, and consent-management providers. Those providers must handle data under their contractual and legal obligations.
Payments
Payment details are handled by the payment provider selected at checkout. ART-GAL does not ask you to send full card details by email. The provider may process information under its own privacy policy to authorise and protect the transaction.
Retention and security
We keep personal data only for as long as it is needed for the purpose collected, to complete an order, resolve a dispute, meet accounting and legal requirements, or protect the website. We use reasonable technical and organisational safeguards, but no internet transmission or storage system can be guaranteed completely secure.
Your rights
Subject to applicable law, you may ask for access to, correction or deletion of your data, restriction or objection to certain processing, a copy of data you provided, or withdrawal of consent where processing relies on consent. Contact galyna3.dp@gmail.com. You may also complain to the data-protection authority in the country where you live or work.
Analytics and session replay
ART-GAL uses Amplitude to understand how visitors use the website and advertising landing pages. Before analytics consent, ART-GAL may collect minimized anonymous campaign measurement without persistent Amplitude identity storage. After you grant statistics/analytics consent, Amplitude may collect page views, navigation events, artwork interactions, cart, checkout, and purchase funnel events, and masked session replay. Session replay is configured to mask or block customer names, contact details, addresses, payment data, order notes, account pages, login pages, and order confirmation pages. ART-GAL does not intentionally send customer names, emails, phone numbers, addresses, payment details, or card data to Amplitude.
Updates
We may update this policy when the website, services, or legal requirements change. The current version is published on this page.
United States privacy choices
For visitors we identify as being in the United States, Art-Gal uses a lighter privacy flow: analytics, advertising measurement, and masked Amplitude Session Replay may run without the EU consent popup, unless you opt out.
You can opt out using the “Privacy choices” control shown on the site. We also honor browser Global Privacy Control signals where available. If you opt out or your browser sends Global Privacy Control, analytics, session replay, and advertising measurement are disabled for that browser.
Session replay is configured with conservative masking, and checkout, account, payment, form, and order details are blocked or masked.