Privacy Policy

Last updated: April 2026

1. Data We Collect

When you make a purchase or send an inquiry, we collect your name, email address, shipping address, and payment information. Payment data is handled exclusively by Stripe and is never stored on our servers. We may also collect anonymous analytics data (page views, clicks) if you consent to cookies.

2. How We Use Your Data

Your data is used to process orders, arrange shipment, communicate about your purchase, and — with your consent — send occasional newsletters about new works and exhibitions. We do not sell or rent your personal data to third parties.

3. Third Parties

We share data with: Stripe (payment processing), shipping carriers (for delivery), and Resend (transactional email). Each has their own privacy policy.

4. Data Retention

Order data is retained for 7 years to comply with tax regulations. Newsletter subscriber data is retained until you unsubscribe.

5. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, or port your personal data. To exercise these rights, contact info@patricia-arriola.com. You may also lodge a complaint with your national data protection authority.

6. Cookies

We use necessary cookies for cart functionality and optional analytics cookies. You can manage your consent via the banner that appears on your first visit.