Privacy Policy (GDPR Privacy Notice)

Last updated: 12/01/2025

This Privacy Policy explains how Artograph (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make a purchase from https://artograph.art.

Artograph is a brand operated by COTTONPASSION – LDA, registered in Portugal.

1. Data Controller

Legal entity: COTTONPASSION – LDA
Brand: Artograph
Address: Rua Gervásio Lobato 4, Aroeira, Portugal
Email: info@artograph.art

2. Personal Data We Collect

Depending on how you interact with the website, we may collect:

Identification data: name, surname
Contact data: email address, phone number
Account data: login credentials
Order data: billing and shipping address, purchased products
Payment data: processed securely by third-party payment providers (we do not store card details)
Technical data: IP address, browser, device, cookies
Marketing preferences and consent

3. How We Use Your Data

We process personal data to:

Fulfill and deliver orders
Manage user accounts
Provide customer support
Send transactional and marketing emails
Improve our website and services
Comply with legal and tax obligations
Run analytics and advertising campaigns

4. Legal Basis for Processing (GDPR Art. 6)

We rely on the following legal bases:

Performance of a contract
Legal obligations
Legitimate interest
User consent (for marketing & cookies)

5. Sharing Your Data

Your data may be shared with trusted third parties such as:

Shopify (e-commerce platform)
Payment providers (Shopify Payments, Stripe, PayPal, MB Way)
Shipping and logistics partners
Email marketing services
Analytics and advertising platforms (Google, Meta)
All partners process data in compliance with GDPR.

6. International Data Transfers

Some service providers may process data outside the EU. In such cases, we ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain personal data only as long as necessary:

Orders and invoices: as required by law
Accounts: until deletion request
Marketing data: until consent is withdrawn

8. Your Rights Under GDPR

You have the right to:

Access your personal data
Rectify inaccurate data
Request erasure (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with a supervisory authority
Requests can be sent to info@artograph.art.

9. Security

We implement appropriate technical and organizational measures to protect your personal data.

10. Changes

We may update this Privacy Policy from time to time. The latest version will always be available on our website.