Privacy policy

Privacy Policy

Last updated: February 2026

Data Controller

François Noell, trading as Symbol Art Gallery 10 Rue de l'Abreuvoir, 66680 Canohes, France SIRET: 904 135 027 00012 Email: contact@symbolartgallery.com

Data We Collect

When you place an order: Full name, email address, shipping and billing address, phone number (if provided), and payment information (processed securely by Shopify Payments — we never store your credit card details).

When you browse our website: IP address, browser type and version, pages visited, time spent, referring website, and device information (collected via cookies — see our Cookie Policy on the Legal Notice page).

When you subscribe to our newsletter: Email address and name (if provided).

When you use our wishlist feature: Email address and saved product selections.

How We Use Your Data

We use your personal data to:

Process and fulfill your orders.
Communicate about your order (confirmation, shipping updates).
Respond to inquiries and provide customer support.
Send marketing communications (only with your explicit consent).
Improve our website and customer experience.
Comply with legal and tax obligations.

Legal Basis for Processing (GDPR)

Contract performance: to fulfill your orders and provide our services.
Legitimate interest: to improve our website, prevent fraud, and ensure security.
Consent: for marketing communications and non-essential cookies.
Legal obligation: for tax, accounting, and regulatory requirements.

Data Sharing

We share your data only with trusted third parties necessary to operate our business:

Service Provider	Purpose	Location
Shopify	E-commerce platform & hosting	Canada / USA
Shopify Payments / Stripe	Payment processing	USA
Gelato	Order fulfillment & shipping	EU / Global
Google Analytics	Website analytics	USA
Swym (Swish)	Wishlist functionality	USA

All third-party providers are contractually required to protect your data. Where data is transferred outside the EU, appropriate safeguards (Standard Contractual Clauses) are in place.

We never sell your personal data to third parties.

Data Retention

Order data: 10 years (French tax and accounting obligations).
Customer accounts & wishlists: retained until you request deletion.
Newsletter subscribers: retained until you unsubscribe.
Analytics data: 26 months maximum.

Your Rights

Under the GDPR, you have the right to:

Access your personal data.
Rectify inaccurate or incomplete data.
Erase your data ("right to be forgotten").
Restrict processing of your data.
Data portability — receive your data in a structured format.
Object to processing based on legitimate interest.
Withdraw consent at any time for marketing communications.

To exercise any of these rights, contact us at contact@symbolartgallery.com. We will respond within 30 days.

If you believe your rights have not been respected, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including SSL encryption, secure payment processing, and restricted access to personal information.

Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date.