Privacy Policy

Last updated: 13th June 2026

This Privacy Policy describes how the personal data of visitors and customers of this website is collected, used and protected, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and other applicable legislation.

1. Data controller

For any question regarding your personal data, you may contact us using the email address above.

2. Data we collect

Depending on how you interact with the website, we may collect:

  • Identification and contact data: name, email, telephone number.

  • Billing and shipping data: billing and delivery address, tax number (if you request an invoice with a tax ID), country.

  • Payment data: processed directly by our payment providers (we do not store full card details).

  • Communication data: the content of messages you send us through forms or email.

  • Browsing data: IP address, device and browser type, pages visited, and data collected through cookies (see the Cookie Policy).

3. Purposes and legal bases for processing

Purpose

Legal basis (GDPR)

We process your personal data for the following purposes, on the following legal bases under the GDPR:

- Processing and delivering orders — performance of a contract (Art. 6(1)(b)).

- Responding to contact requests — pre-contractual steps / legitimate interest (Art. 6(1)(b) and (f)).

- Complying with legal and tax obligations (e.g. invoicing) — legal obligation (Art. 6(1)(c)).

- Sending marketing communications / newsletter — consent (Art. 6(1)(a)).

- Improving the website and analysing its use — consent (cookies) / legitimate interest (Art. 6(1)(a) and (f)).

- Fraud prevention and security — legitimate interest (Art. 6(1)(f)).

4. Recipients of data (processors)

To provide our services, we share data with providers acting on our behalf, namely:

  • Squarespace, Inc. — hosting and management of the website and online store.

  • Payment providers — payment processing (e.g. Stripe, PayPal)."

  • Logistics operators and carriers — delivery of the artworks. (e.g. CTT, DHL, UPS)

  • Email marketing providers (if applicable).

These providers only process data in accordance with our instructions and are bound to ensure its confidentiality and security.

5. International data transfers

Some of our providers (such as Squarespace) are based outside the European Economic Area, namely in the United States of America. In such cases, data transfers are safeguarded by mechanisms provided for in the GDPR, such as adequacy decisions or standard contractual clauses approved by the European Commission.

6. Retention periods

  • Order and billing data: for the period required by tax and commercial law (generally 10 years).

  • Contact data without a purchase: for as long as necessary to respond to the request.

  • Marketing data: until you withdraw your consent.

  • Browsing/cookie data: as indicated in the Cookie Policy.

After these periods, data is deleted or anonymised.

7. Your rights

Under the GDPR, you have the right to:

  • Access your personal data;

  • Rectification of inaccurate or incomplete data;

  • Erasure ("right to be forgotten");

  • Restriction of processing;

  • Data portability;

  • Object to processing based on legitimate interest or for marketing purposes;

  • Withdraw consent at any time, without affecting the lawfulness of processing already carried out.

To exercise these rights, contact us using the email address in section 1. We will respond within one month.

8. Right to lodge a complaint

If you believe that the processing of your data infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority:

Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD) Website: www.cnpd.pt

9. Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss or improper disclosure, including the use of secure connections (HTTPS).

10. Changes to this policy

This Privacy Policy may be updated from time to time. The version in force will always be the one published on this page, together with its update date.