Privacy Policy

1. Who We Are

Physical Art For Crypto ("we," "us," or "our") operates the website physicalartforcrypto.com (the "Site"). We sell and facilitate the sale of original artwork by Lei-Kol. We may fulfill orders ourselves or through affiliated sister companies and third-party service providers (collectively, "Service Partners").

Data Controller: Physical Art For Crypto
Contact Email: info@physicalartforcrypto.com

2. Information We Collect

2.1 Information You Provide

When you use our contact form, place an order, or communicate with us, you may provide:

• Full name
• Email address
• Phone number (optional)
• Shipping address (when applicable)
• Message content / inquiry details
• Payment information (processed by third-party payment processors; we do not store credit card details)
• Cryptocurrency wallet addresses (for crypto transactions)

2.2 Information Collected Automatically

When you visit our Site, we automatically collect:

• Log Data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, time spent on pages
• Cookies & Similar Technologies: See Section 5 below for full cookie details
• Device Information: Screen resolution, device type (mobile/desktop), language preference

2.3 Consent Records

When you submit our contact form, we record your consent choices (privacy policy acceptance and marketing opt-in status) along with a timestamp. These records are retained as proof of consent as required by applicable law.

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to inquiries: Processing and replying to your contact form submissions
• To fulfill orders: Processing purchases, arranging shipping, and coordinating with Service Partners
• To communicate: Sending order confirmations, shipping updates, and customer service correspondence
• Marketing (opt-in only): If you have opted in, we may send promotional emails, text messages, or contact you by phone about new artwork, exhibitions, and offers. You can opt out at any time
• To improve our Site: Analyzing usage patterns via Google Analytics to improve user experience
• Legal compliance: Meeting legal obligations, responding to lawful requests from authorities

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Consent: You have given explicit consent (e.g., marketing opt-in, cookie acceptance)
• Contractual necessity: Processing is necessary to fulfill a purchase or respond to your inquiry
• Legitimate interest: Improving our services, preventing fraud, ensuring site security
• Legal obligation: Complying with applicable laws and regulations

5. Cookies & Tracking Technologies

Our Site uses cookies and similar technologies. Below is a summary of what we use:

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking cookies may affect Site functionality. For EU/EEA visitors, non-essential cookies (such as analytics) will only be set after you provide consent via our cookie banner.

6. Sharing Your Information

We may share your personal data with:

• Service Partners & Sister Companies: We may use affiliated companies or third-party partners to fulfill orders, process shipments, or service your booking. These partners receive only the information necessary to complete the transaction
• Brevo (Sendinblue): Our email service provider, used to deliver contact form submissions and communications
• Google: Google Analytics receives anonymized usage data for website analytics
• Payment Processors: Third-party payment services process cryptocurrency and fiat transactions
• Legal Requirements: We may disclose your data if required by law, court order, or governmental authority

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

7. International Data Transfers

Our Site is hosted in the United States. If you access the Site from outside the United States (including the EEA, UK, Canada, Australia, Brazil, or any other jurisdiction), your data may be transferred to, stored, and processed in the United States or other countries where our Service Partners operate.

Where required by law, we ensure appropriate safeguards are in place for international data transfers, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Contact form submissions: Retained for up to 3 years or until you request deletion
• Purchase records: Retained as required by applicable tax and accounting laws (typically 7 years)
• Consent records: Retained for as long as needed to demonstrate compliance with consent requirements
• Analytics data: Google Analytics data retention is set per Google's default settings (up to 14 months)

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

9.1 All Users

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications at any time

9.2 EEA, UK & Swiss Residents (GDPR / UK GDPR)

• Right to access, rectification, erasure ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with your local Data Protection Authority

9.3 California Residents (CCPA / CPRA)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

9.4 Canadian Residents (PIPEDA / CPPA)

• Right to access your personal information
• Right to challenge accuracy and request amendment
• Right to withdraw consent (subject to legal limitations)

9.5 Brazilian Residents (LGPD)

• Right to confirmation and access
• Right to correction, anonymization, blocking, or deletion of unnecessary data
• Right to data portability
• Right to information about shared data and denial of consent consequences

9.6 Australian Residents (APPs)

• Right to access and correction of personal information
• Right to complain to the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at info@physicalartforcrypto.com. We will respond within 30 days (or as required by your local law).

10. Marketing Communications

We will only send you marketing communications (email, phone, or text message) if you have explicitly opted in via our contact form or another consent mechanism. Marketing consent is always optional and never required to make a purchase or submit an inquiry.

To opt out: You can unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Replying STOP to any text message
• Emailing us at info@physicalartforcrypto.com

Opting out of marketing will not affect transactional communications (e.g., order confirmations, shipping updates).

11. Children's Privacy

Our Site is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

12. Security

We implement commercially reasonable security measures to protect your personal data, including HTTPS encryption, secure hosting on Vercel, and access controls. However, no method of internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

13. Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third-party sites. We encourage you to review the privacy policy of every site you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we may notify you via email (if you have provided one) or a prominent notice on the Site. Continued use of the Site after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have a complaint, contact us at:

Physical Art For Crypto
Email: info@physicalartforcrypto.com
Website: physicalartforcrypto.com/contact-us