Privacy policy

This privacy policy describes how CAROPONS.ART (the "Site", "we", "us" or "our") collects, uses and discloses your personal information when you visit caropons.art or otherwise communicate with us (together, the "Services"). For the purposes of this policy, "you" and "your" refer to you as a user of the Services.

Please read this privacy policy carefully.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised policy on the Site and update the "Last updated" date.

How we collect and use your information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information we collect and use depends on how you interact with us.

Information we collect directly

Information you submit to us directly may include:

• Contact details: name, address, phone number, email — when you write to us via the contact form or to arrange a purchase.
• Order information: name, billing address, shipping address, payment confirmation, email, phone — when you make a purchase.
• Communications with us: the content of your messages.

Information about your use of the Site

We may automatically collect certain information about your interaction with the Services ("Usage Data") — pages visited, duration, referral source, device and browser type, IP address. This is collected through privacy-friendly analytics tools and, where technically necessary, cookies.

Information from third parties

We may receive information about you from service providers:

• Our host and CDN (Netlify), which may collect technical logs required for security and availability.
• Our content management system (Sanity), for serving artwork images and descriptions.
• Our payment provider (Stripe), which collects the payment information needed to process your purchase. We do not store your banking details on our Site.
• Our analytics tool, which may collect aggregated traffic statistics. We favour privacy-friendly, cookieless solutions (such as Plausible).

How we use your information

• Providing the products and services: fulfilling your order, processing payment, arranging shipping, handling returns, and responding to enquiries.
• Communication: customer service and maintaining our relationship with you. If you reside in the EEA, the legal basis is our legitimate interest under art. 6 (1) (f) GDPR.
• Security and fraud prevention: detecting and preventing fraudulent or malicious activity.
• Improving the Site: analysing aggregated usage data to improve the Site.
• Legal obligations: complying with applicable law and responding to requests from authorities.

Cookies and similar technologies

We may use cookies to operate and improve the Site, remember preferences (such as language) and measure traffic anonymously. No advertising or profiling cookies are placed on the Site.

How we share your information

In certain circumstances we may disclose your information to third parties:

• Service providers performing services on our behalf (hosting, payments, analytics, shipping).
• When you instruct us to disclose certain information (e.g., to ship an artwork), with your consent.
• As required by law, to respond to subpoenas and similar requests.

Third-party websites and links

Our Site may provide links to third-party websites (Stripe, social networks). We are not responsible for their content or practices.

Children's data

The Services are not intended for children and we do not knowingly collect any personal information from children. If you are the parent of a child who has provided us with information, contact us to request its deletion.

Security and retention

No security measure is perfect. How long we retain your information depends on the purpose of processing (for example, accounting obligations generally require retaining sale records for 10 years).

Your rights

Depending on where you live, you may have some or all of the following rights:

• Right of access: request access to the information we hold.
• Right to deletion: request deletion of the information.
• Right to correction: request correction of inaccurate information.
• Right to portability: receive a copy of your information.
• Restriction and objection: ask us to restrict or stop certain processing.
• Withdrawal of consent: withdraw your consent at any time.

Complaints

If you have a complaint, contact us. You may lodge a complaint with your local data protection authority — in France, the CNIL (www.cnil.fr).

International transfers

We may transfer, store and process your information outside the country in which you live. For transfers out of the EEA we rely on the European Commission's Standard Contractual Clauses, unless the destination provides an adequate level of protection.

Contact

For any question, write to caropons@hotmail.fr or 38 Rue Marchande, 15100 Saint-Flour, France. For the purposes of applicable data protection law, we are the data controller.