Privacy Policy

Effective Date: October 14, 2026
Data Controller: Art Image Paris (artimageparis.com)
Contact Email: info@artimageparis.com

Art Image Paris (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in strict compliance with the European Union General Data Protection Regulation (GDPR), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), and United States federal and state privacy statutes (including the CCPA/CPRA).

1. Data Controller & Information We Collect

Art Image Paris acts as the Data Controller for the personal information processed through this website. When you browse our gallery or purchase an archival print, we collect only the minimum data necessary:

  • Identity & Order Data: First and last name, billing address, shipping address, email address, and telephone number (required by couriers for art delivery).
  • Financial & Transaction Data: Payment method details, transaction timestamps, and order history. All card details are encrypted and processed directly by Stripe; we never view or store your full credit card numbers on our servers.
  • Technical & Usage Data: IP address, browser type, operating system, time zone, and cookie consent identifiers.

2. Purpose & Lawful Basis for Processing (EU/EEA GDPR)

Under the EU GDPR (Article 6), we only process your personal data when we have a strict legal basis to do so:

  • Performance of a Contract (Art. 6(1)(b) GDPR): To process your payment, custom-print your artwork, and deliver your order to your designated address.
  • Legal Obligation (Art. 6(1)(c) GDPR): To maintain statutory accounting, tax, and commercial transaction records required by tax authorities.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To protect our website against fraud, abuse, and security threats.
  • Explicit Consent (Art. 6(1)(a) GDPR): For placing non-essential cookies or sending newsletter updates, which you may withdraw at any time.

3. Third-Party Processors & International Data Transfers

We never sell, rent, or trade your personal data. We share data exclusively with essential operational partners bound by strict data processing agreements:

  • Production & Fulfillment (Gelato): We transmit your recipient name, shipping address, and print specifications to Gelato so your artwork can be produced at regional archival facilities located closest to your delivery address (in the US, Canada, or EU).
  • Payment Processing (Stripe): Encrypted payment data is processed by Stripe, Inc. for payment authorization and fraud screening.

Cross-Border Safeguards: When personal data moves between the EU/EEA, Canada, and the United States, transfers are protected by European Commission Standard Contractual Clauses (SCCs), adequacy decisions (including the EU-US Data Privacy Framework and Canadian PIPEDA adequacy), and industry-standard encryption.

4. European Union & UK Collector Rights (GDPR)

If you are located in the European Economic Area (EEA) or the UK, you have the statutory right to:

  • Access & Portability: Request a copy of the personal data we hold about you in a structured, machine-readable format.
  • Rectification: Request immediate correction of inaccurate or incomplete personal data.
  • Erasure (“Right to be Forgotten”): Request deletion of your personal data where it is no longer legally required for tax or accounting retention.
  • Restriction & Objection: Object to processing based on legitimate interests or request temporary restriction of processing.
  • Supervisory Authority Complaint: Lodge a complaint with your national Data Protection Authority (such as the CNIL in France or your local EU regulator).

5. United States Privacy Disclosures (CCPA / CPRA & State Laws)

For residents of California, Virginia, Colorado, Connecticut, and other US states with consumer privacy laws:

  • Right to Know & Delete: You have the right to request disclosure of the categories and specific pieces of personal information collected over the past 12 months, and to request its deletion (subject to statutory tax/order record exceptions).
  • Do Not Sell or Share My Personal Information: Art Image Paris does not sell or share your personal information for monetary consideration or cross-context behavioral advertising, nor do we collect sensitive personal information for inferring consumer characteristics.
  • Non-Discrimination: We will never discriminate against you in pricing or service quality for exercising your privacy rights.

6. Canadian Privacy Rights (PIPEDA & Law 25 / CASL)

For residents of Canada (including Quebec under Law 25):

  • Access & Withdrawal of Consent: You have the right to access your personal information held by us, request corrections, or withdraw consent for non-essential processing at any time.
  • Canada’s Anti-Spam Legislation (CASL): We only send commercial electronic messages if you have provided express opt-in consent. Every marketing email includes an immediate one-click unsubscribe mechanism.

7. Data Retention & Contact

Order and invoice records are retained for 7 to 10 years to comply with mandatory international tax and commercial audit laws. Technical browsing logs and inactive inquiries are purged within 12 months.

To exercise any of your privacy rights across the US, Canada, or the EU, please contact us at:
Email: info@artimageparis.com
Subject Line: Privacy Rights Request