This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.veronicaruizdevelasco.com (the “Site”).
PERSONAL INFORMATION WE COLLECT
When you visit our website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the site, and information about how you interact with the site. When you use our app, we instead automatically collect device and usage information directly — including your app session, the paintings and pages you view, and the features you use (for example, AR viewer launches and audio plays) — through our own first-party analytics; we do not use browser cookies, web beacons, or any third-party advertising SDK inside the app, and we do not access your device's advertising identifier (IDFA). We refer to this automatically-collected information, from either the website or the app, as “Device Information”.
On our website, we collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the site.
None of the above apply inside the app, except within the checkout screen, which is hosted by Shopify and subject to Shopify's own cookie and tracking practices (see the SHARING YOUR PERSONAL INFORMATION section below for the link to Shopify's privacy policy). Outside of checkout, Device Information in the app is limited to the first-party app-event data described above, stored with our backend provider (Supabase).
Additionally when you make a purchase or attempt to make a purchase through the website, the app, or in person at the gallery or an art fair, we collect certain information from you, including your name, billing address, shipping address, payment information (which may include your card number and expiration date), email address, and phone number. Payment information is processed through our payment processors, including Shopify Payments (online) and Square (in-person). We refer to this information as “Order Information”.
LOCATION
If you allow it, our app uses your device location for one purpose: to tell whether you are at or near the gallery at 313 Worth Avenue, Palm Beach. What we keep is how far away you are, in meters, and the time you arrived — not your coordinates, and not any record of where you go when you are away from the gallery. Gallery staff can see, by name, that a signed-in collector is at or near the gallery, so that they can greet you; if we enable features that depend on where you are inside the gallery, we record that as well. A separate alert that tells you when you are near Worth Avenue is off unless you switch it on in your Profile. If you deliver for the gallery, the app also shares your coordinates with the collector receiving that delivery while it is under way, so that use of location is not limited to distance and arrival time. You can withdraw location access at any time in your device settings, and every other part of our app continues to work without it. Arrival records are deleted with the rest of your account data when you ask us to delete your account.
ROOM VISUALIZATION PHOTOS
If you use the Room Visualization feature in our app to see an artwork composited into your own space, we collect the photo of your room that you choose to upload. That photo is stored in our systems and sent to our AI image-generation vendor (OpenAI) solely to generate the composite image you requested. We do not use your room photo for advertising or marketing, do not publish it, and do not share it with anyone other than that vendor for that purpose. You can request deletion of a room photo at any time using the contact information in the Data Retention section below.
COLLECTOR SPACES
If you submit a photograph of your own room through the Share Your Space feature, we store that photograph and any note you send with it. Gallery staff review submissions, and we may feature one inside our app so that other collectors can see a work in a real home. A featured submission appears anonymously, as “A collector,” unless you have chosen to show your name — that choice is yours, it is off unless you turn it on, and you can change it at any time. We do not use these photographs in paid advertising and we do not share them outside the gallery. You can ask us to remove a photograph at any time using the contact information below. Photographs submitted through Share Your Space are governed by this section, and not by the user-submission license in Section 9 of our Terms of Service.
PUSH NOTIFICATIONS
If you allow notifications, our app registers a notification token issued by Apple or Google for your device and stores it against your account, so that we can send you a reply from the Concierge, an exhibition invitation, a delivery update, or word of a work you asked to be told about. The token identifies your device to Apple or Google for delivery; it tells us nothing about how you use your device. You can turn notifications off at any time in your device settings, and the token is deleted when you delete your account.
When we talk about “Personal Information” in this Privacy Policy, we are talking about Device Information, Order Information, location information, notification tokens, and any photographs you submit through the Room Visualization or Share Your Space features.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
- Communicate with you;
- Screen our orders for potential risk or fraud; and
- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. If you use the Room Visualization feature in our app, we also share the room photo you upload with OpenAI, our AI image-generation vendor, solely to generate the composite image you requested — see the ROOM VISUALIZATION PHOTOS section above.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
BEHAVIOURAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by using the links below:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
DO NOT TRACK
Our website does not alter its data collection and use practices when it sees a Do Not Track signal from your browser. Our app does not use cross-app or cross-site tracking technology, so no Do Not Track signal applies to it.
YOUR RIGHTS
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
CALIFORNIA RESIDENTS (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request its deletion, to correct inaccurate information, and to opt out of any “sale” or “sharing” of personal information, each as defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Our website shares Device Information with Google Analytics and with advertising partners such as Facebook and Bing for targeted-advertising purposes, which may constitute “sharing” under the CPRA; you can opt out using the links in the Behavioural Advertising section above, or by contacting us at the email below with “Do Not Sell or Share My Personal Information” in the subject line. Our app does not share Device Information with any advertising partner. We do not sell personal information for money, from either the website or the app.
DATA RETENTION
When you place an order through the Site or the app, we will maintain your Order Information for our records unless and until you ask us to delete this information. You can request deletion of your account and associated data by contacting us at the email below, and we will honor that request except where we need to keep certain information for legitimate business purposes, such as tax, accounting, or fraud-prevention records, or as required by law.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
MINORS
The Site is not intended for individuals under the age of majority in their state or province of residence (18 in most U.S. states), consistent with the age representation you make when you accept our Terms of Service.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at sales@veroart.com.
EUROPEAN ECONOMIC AREA AND UNITED KINGDOM (GDPR / UK GDPR)
This section applies if you are in the EEA or the United Kingdom, and prevails over anything inconsistent above. We sell and ship to Europe, so the GDPR and UK GDPR apply to us.
Controller. Gallery Veronica Ruiz de Velasco, 313 Worth Avenue, Palm Beach, FL 33480, United States. sales@veroart.com.
EU representative (Art. 27 GDPR): [TO BE APPOINTED - NAME AND EU ADDRESS]
UK representative (Art. 27 UK GDPR): [TO BE APPOINTED - NAME AND UK ADDRESS]
What we process and why.
- Order Information (name, billing and delivery address, email, telephone, order contents). Purpose: to take payment and deliver your artwork. Lawful basis: Art. 6(1)(b), performance of your contract.
- Enquiries you send us (name, email, your message). Purpose: to answer you. Lawful basis: Art. 6(1)(b) where the enquiry concerns a purchase, otherwise Art. 6(1)(f), our legitimate interest in responding to people who contact us.
- Device Information and server logs (IP address, browser, pages viewed, timestamps). Purpose: security, fraud screening, and keeping the site available. Lawful basis: Art. 6(1)(f), our legitimate interest in protecting the service.
- Analytics and advertising, where used. Lawful basis: Art. 6(1)(a), your consent, which you may withdraw at any time. We do not place non-essential cookies on visitors in the EEA or UK without consent.
Your rights. You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing carried out on the basis of legitimate interests. Where we rely on consent you may withdraw it at any time, without affecting processing already carried out. To exercise any of these, email sales@veroart.com. We will respond within one month. There is no charge, and we will not treat you differently for asking.
You have the right to lodge a complaint with your national supervisory authority. In the United Kingdom that is the Information Commissioner's Office, ico.org.uk.
No automated decision-making. We do not make decisions about you by automated means, and we do not profile you in any way that produces legal or similarly significant effects.
International transfers. We are established in the United States, so using this site or ordering from us transfers your personal information out of the EEA and the UK. For orders that transfer is necessary to perform the contract you asked us to enter into (Art. 49(1)(b)); for enquiries it is necessary to answer the request you made to us. Our service providers, including Shopify, additionally operate under Standard Contractual Clauses. The United States has not been found to offer an equivalent level of protection, and you may have fewer routes of redress than at home. If you would prefer not to transfer your data, contact us by telephone or post instead.
Retention. We keep Order Information for as long as tax, customs and commercial law requires, which is generally seven years from the transaction. Enquiries are kept in the gallery inbox for 24 months and then deleted. Server logs are kept for 90 days. We do not keep personal information for longer than we need it.
Children. We do not knowingly collect personal information from anyone under 16.