GOOD TO KNOW
Privacy notice
Your information helps us deliver your kit and support your order. Optional measurement is your choice.
Who is responsible for your information
Afremov Gallery, Inc. is the controller of personal data used to operate allofart.com.
131 Continental Dr., Suite 305, Newark, Delaware 19713, United States
Contact order@allofart.com.
What we collect and why
- Orders and delivery: your email, recipient name, delivery address, optional phone number, purchased kit configurations, payment-provider references and shipment details. We use these to take payment, arrange production and shipping, and support your purchase. The usual legal basis is performing our contract with you or taking steps at your request before a purchase.
- Order access and security: email sign-in challenges, session information and technical security records. We use these to protect order access, prevent abuse and investigate problems, based on our legitimate interests in operating a secure shop.
- Customer support: messages and order information you provide so we can answer questions, handle returns and resolve problems. This supports our contract and our legitimate interest in responding to enquiries.
- Required records: information we must keep to meet applicable accounting, tax and other legal obligations.
- Optional analytics and marketing: only with the relevant cookie consent. Events may describe products viewed, cart actions and a confirmed purchase, with sanitized campaign identifiers. Providers may also process device/browser information and network information according to their policies. Our ecommerce payloads omit checkout contact/address fields, email login codes and private order-link tokens.
- Consent evidence: a random browser key and a dated record of your choices, policy version and consent scope. We keep these to respect and demonstrate your choices. The consent receipt does not store your name, email, IP address, user agent or page URL.
Checkout and order access do not require consent to analytics or advertising. Our ordinary checkout does not ask you to create a password. Payment card details are entered through the payment provider’s secure components.
Who receives information
We use payment services such as Stripe and, when enabled, PayPal. Production and shipping partners receive the details needed to prepare and deliver your order. Hosting, email and other technical service providers support the store. We may also share information when required by law or needed to establish or defend legal claims.
The website is hosted on a Contabo VPS in the United States. Transactional email is provided through ACURP Hosting's SupremeCluster service (mail.supremecluster.com).
When optional Google measurement is enabled and you consent, Google may receive measurement data. See Google’s privacy policy. Linking to Afremov.com does not embed its tracking code in this store; visiting an external site is governed by that site’s policies.
International processing
The business is registered in the United States and kits are fulfilled from China. Service providers may process information in other countries.
For production and delivery, necessary order and delivery information is shared with production and logistics partners in China under agreed data-protection and confidentiality terms. Contact order@allofart.com for information about the safeguards applicable to your data and how to obtain a copy of the relevant contractual protections.
How long we keep information
Working retention plan: support messages are kept for up to 2 years after the last contact; security logs for up to 90 days; browser cookie choices for up to 180 days. Operational retention and deletion procedures will be configured with the production providers before launch.
Order information is kept for as long as needed to fulfill your order, handle returns and resolve disputes. Accounting and tax documents are retained for the periods required by applicable law, taking account of tax-filing dates, audit periods and unresolved claims.
Email sign-in codes expire after ten minutes. Cookie preferences last up to 180 days on your browser unless you change them sooner. Browser consent receipts are removed by the daily retention process after 180 days. These expiry periods do not mean all related order, email or security records are automatically deleted.
Your GDPR and other privacy rights
Where the GDPR or UK GDPR applies, you may request access, correction, erasure, restriction, or a portable copy of your personal data, and object to processing where applicable. You can withdraw optional cookie consent at any time. Withdrawal does not affect processing that was lawful before it. Rights have conditions and exceptions; for example, some transaction records may have to be retained to meet legal obligations.
Contact order@allofart.com.
Tell us what you would like to do and provide the email used for your order. We may need proportionate information to verify your identity before releasing or changing personal data. Please do not send card details or identity documents unless we have explained why they are necessary and provided a suitable way to send them.
We respond to GDPR rights requests without undue delay, normally within one month. If a permitted extension is necessary, we will tell you within that initial month and explain why. You can also complain to the data protection authority where you live, work or believe an infringement occurred.
Cookies and your choices
See the cookie policy for storage technologies, durations and controls. .
Changes to this notice
We update this notice when the way we use information changes. The version and update date appear at the top of this page. Changes to the configured optional tracking or policy version require a fresh cookie choice.