Privacy policy

This privacy policy describes how CAROPONS.ART(the “Site”, “we”, “us” or “our”) collects, uses and discloses your personal information when you visit caropons.art (the “Site”) or otherwise communicate with us (together, the “Services”). For the purposes of this policy, “you” and “your” refer to you as a user of the Services, whether you are a customer, a visitor or another person whose information we have collected.

Please read this privacy policy carefully.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised policy on the Site, update the “Last updated” date and provide any other notice required by applicable law.

How we collect and use your information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information we collect and use depends on how you interact with us.

In addition to the specific uses described below, we may use the information we collect to communicate with you, to provide or improve the Services, to comply with applicable legal obligations, and to protect or defend the Services, our rights and the rights of our users.

Information we collect directly

Information you submit to us directly may include:

• Contact details: name, address, phone number, email — when you write to us via the contact form or to arrange a purchase.
• Order information: name, billing address, shipping address, payment confirmation, email, phone number — when you make a purchase.
• Communications with us: the content of your messages, for example when you submit an enquiry via the contact form.

Some features may require you to provide certain information. You may choose not to provide it, but that may prevent you from using those features (for example, completing a purchase or receiving a reply to an enquiry).

Information about your use of the Site

We may automatically collect certain information about your interaction with the Services (“Usage Data”). This may include how you access the Site (pages visited, duration, referral source), your device and browser type, your network connection and your IP address. This information is collected through privacy-friendly analytics tools and — where technically necessary — through cookies or similar technologies.

Information from third parties

We may receive information about you from service providers that we use to run the Site:

• Our host and CDN (Netlify), which may collect technical logs required for the security and availability of the Site.
• Our content management system (Sanity), for serving artwork images and descriptions.
• Our payment providers (PayPal, SumUp), which collect the payment information needed to process your purchase. We do not store your banking details on our Site: they are transmitted directly to those providers.
• Our analytics tool, which may collect aggregated traffic statistics. We favour privacy-friendly, cookieless solutions (such as Plausible) whenever possible.

Any information we obtain from third parties will be handled in accordance with this policy. See also “Third-party websites and links” below.

How we use your information

• Providing the products and services: we use your information to fulfil your order, process payment, arrange shipping, facilitate any returns and respond to enquiries you send via the contact form.
• Communication: we use your contact details to provide customer service, answer your questions and maintain our relationship with you. If you reside in the EEA, the legal basis is our legitimate interest under art. 6 (1) (f) GDPR.
• Security and fraud prevention: we use your information to detect and prevent fraudulent, illegal or malicious activity. If you reside in the EEA, the legal basis is our legitimate interest in keeping the Site secure.
• Improving the Site: we use aggregated usage data (anonymous traffic statistics) to understand how the Site is used and to improve it.
• Legal obligations: we may use your information to comply with applicable law, respond to requests from authorities and enforce our rights.

Cookies and similar technologies

Like many websites, we may use cookies and similar technologies (“Cookies”) to operate and improve the Site, to remember your preferences (such as language) and to measure traffic anonymously. We follow a minimalist approach: no advertising or profiling cookies are placed on the Site.

Most browsers accept cookies automatically, but you can configure your browser to delete or reject them. Please note that blocking cookies may affect some functionality.

How we share your information

In certain circumstances, we may disclose your information to third parties for contract performance, legitimate purposes and other reasons subject to this policy. These may include:

• Service providers performing services on our behalf (hosting, payment processing, anonymous analytics, shipping).
• When you instruct us to disclose certain information to third parties (for example, to ship an artwork to you), with your consent.
• As required by law, to respond to subpoenas and similar requests, and to protect or defend our rights and those of our users.

Third-party websites and links

Our Site may provide links to third-party websites (for example PayPal or SumUp payment pages, social networks). If you follow these links, you should review their privacy policies. We are not responsible for the content or practices of those sites.

Children's data

The Services are not intended for children, and we do not knowingly collect any personal information from children. If you are the parent or guardian of a child who has provided us with information, please contact us to request its deletion.

Security and retention

No security measure is perfect or impenetrable. We recommend that you do not use unsecured channels to send us sensitive or confidential information. How long we retain your information depends on the purpose of processing (for example, accounting obligations generally require retaining sale records for 10 years).

Your rights

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• Right of access: request access to the information we hold about you.
• Right to deletion: request that we delete the information we hold about you.
• Right to correction: request that we correct inaccurate information.
• Right to portability: receive a copy of your information in a structured, machine-readable format.
• Restriction and objection: ask us to restrict or stop certain processing.
• Withdrawal of consent: where we rely on your consent, you may withdraw it at any time.

You may exercise these rights by contacting us using the details below. We may need to verify your identity before responding. We will respond to your request within the time required by applicable law, and we will not discriminate against you for exercising any of these rights.

Complaints

If you have a complaint about how we handle your information, please contact us below. If our response does not satisfy you, you have the right to lodge a complaint with your local data protection authority — in France, the CNIL (www.cnil.fr).

International transfers

We may transfer, store and process your information outside the country in which you live, including through our technical service providers. If we transfer information out of the European Economic Area, we will rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country that has been determined to provide an adequate level of protection.

Contact

For any question about this policy or to exercise your rights, write to us at caropons@hotmail.fr or by post at 38 Rue Marchande, 15100 Saint-Flour, France. See also our legal notice. For the purposes of applicable data protection law, we are the data controller of your personal information.