We may collect the following types of personal data:

- Personal Information: name, email address, phone number, shipping and billing address
- Order Information: details about products you purchase, payment status
- Technical Data: IP address, browser type, device information
- Communication Data: any information you provide via contact forms or email

We use your information to:

- Process and fulfill your orders
- Provide customer support
- Communicate with your order or inquiries
- Send transactional emails (e.g., order confirmations)
- Prevent fraud and ensure website security

We use third-party payment providers to process payments securely. We do not store your full payment details (such as credit card numbers).

Payment providers may collect and process your data in accordance with their own privacy policies.

We use cookies and similar technologies to ensure the proper functioning of our website and to improve your user experience.
Cookies may include:

• Essential cookies – necessary for the website to function properly
• Functional cookies – remember your preferences

When you first visit our website, you may be asked to consent to the use of cookies, in accordance with applicable laws such as the GDPR and ePrivacy Directive.
You can manage or disable cookies at any time through your browser settings.

We may use third-party services necessary for website operation, such as:

- Website platform provider (Tilda)
- Payment processors

These third parties may process your data according to their own privacy policies.

We retain your personal information only as long as necessary to:

- Fulfill the purposes outlined in this policy
- Comply with legal obligations

If  you are located in the European Economic Area, you have the following rights:

• Right to access your personal data
• Right to correct inaccurate data
• Right to request deletion (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

To exercise your rights, please contact us using the details 

We take reasonable technical and organizational measures to protect your personal data from unauthorized access, misuse, or disclosure.

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Performance of a contract (e.g., to process and deliver your order)
• Legal obligations (e.g., tax and accounting requirements)
• Legitimate interests (e.g., improving our services, preventing fraud)
• Consent (e.g., when you submit a contact form or accept cookies)

Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Performance of a contract (e.g., to process and deliver your order)
• Legal obligations (e.g., tax and accounting requirements)
• Legitimate interests (e.g., improving our services, preventing fraud)
• Consent (e.g., when you submit a contact form or accept cookies)

If you have any questions about this Privacy Policy, you can contact us at:

Email:
Business Name: Vintage Story Art