Privacy Policy

Last updated: 27 October 2026

ART137 Studio respects the privacy of its customers and visitors. This Privacy Policy explains what personal data we collect, the purposes for which we use it, who it may be shared with, how long it is retained and the rights of data subjects.

1. Data controller

The controller responsible for processing personal data is Ivo Carvalhal — ART137 Studio, at Travessa Paraíso 137, 4420-248 Gondomar, Portugal.

Contact for privacy and data protection matters: info@art137.com.

2. Personal data we collect

Depending on how you use the website, we may collect the following categories of data:

identification and contact details, such as your name, email address, telephone number and postal address;
information required for invoicing, delivery and order management;
customer account information, preferences and order history;
messages, enquiries, support requests and other communications;
technical data, such as IP address, browser type, device, pages visited and information collected through cookies or similar technologies;
payment status and transaction references. Full card details are processed directly by payment service providers and are not stored by ART137 Studio.

3. Purposes and legal bases

Personal data may be processed to:

process payments, orders, deliveries, returns and support requests, on the basis of performing a contract;
issue invoices, retain accounting records and comply with other legal obligations;
prevent fraud, secure the website and defend ART137 Studio’s rights, on the basis of legitimate interests;
respond to enquiries and improve our products, services and website operation;
send marketing communications where consent has been given or another applicable legal basis exists;
perform statistical analysis and measure campaigns where these activities depend on cookie consent.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal.

4. Sharing personal data

ART137 Studio does not sell or rent personal data. Data may be disclosed only where necessary to service providers that support our business, including hosting, technical maintenance, payment, invoicing, delivery, email, customer support, analytics and advertising services.

These providers must process the data only for the contracted purposes and in accordance with applicable legal obligations. Data may also be disclosed to public authorities where required by law or by a valid order.

5. International transfers

Some service providers used by ART137 Studio may process data outside the European Economic Area. Where this occurs, transfers will rely on an adequacy decision or other legally recognised safeguards, including the EU–US Data Privacy Framework where applicable, or standard contractual clauses approved by the European Commission.

6. Data retention

Data is retained only for as long as necessary for the purposes for which it was collected and to comply with legal obligations. In particular:

order and invoicing data is retained for the periods required by law;
account data is retained while the account remains active or for as long as necessary to provide the service;
marketing data is processed until consent is withdrawn or an objection is made;
cookie retention periods are set out in our Cookie Policy.

7. Security

We apply technical and organisational measures appropriate to the level of risk to protect data against unauthorised access, loss, alteration, disclosure or destruction. Despite these measures, no system connected to the Internet can guarantee absolute security.

8. Data subject rights

Under applicable law, you may request:

access to your personal data;
rectification of inaccurate or incomplete data;
erasure of data where legally applicable;
restriction of processing;
data portability;
objection to processing based on legitimate interests or for direct marketing purposes;
withdrawal of consent where consent is the legal basis for processing.

To exercise these rights, contact us at info@art137.com. We may request additional information strictly necessary to verify the identity of the person making the request.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

9. Cookies and similar technologies

The website uses cookies that are necessary for its operation and, with your consent, preference, analytics and marketing cookies. You may accept, reject or change your choices through the consent panel and the permanent “Manage preferences” option.

See our Cookie Policy for up-to-date information about the cookies used, their purposes and retention periods.

10. Links to third-party websites

The website may contain links to third-party services. ART137 Studio does not control the privacy practices of those services, so we recommend reviewing their policies before providing them with personal data.

11. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes in the law, technology or the services used. The current version and the date of the latest update will always be available on this page.