Privacy policy

Last updated: 11 September 2025

This policy explains clearly what information I collect, how I use it, and what your rights are.

Who is responsible for your data?

Controller: Bea Cordero (Bea Cordero Art)
Email: bea@beacordero.art
Address: Barcelona, Spain

 

What data do I collect?

  • Contact and account details: name, email, phone, shipping/billing address, your preferences.

  • Orders and payments: products, amount, payment method, payment status (I do not store your card details; payments are processed by a secure provider).

  • Website usage: IP address, browser, device, pages viewed, shopping cart; cookies or similar technologies.

  • Communications: messages you send me (email/forms).

  • Social logins (optional): if you sign in with Google or Facebook, I receive only the basic data needed to identify you.

Why do I use your data (and on what legal basis)?

  • To sell and deliver your artworks (contract performance): processing orders, shipping, returns and refunds.

  • Customer service (legitimate interest/contract): responding to enquiries and resolving issues.

  • Fraud prevention and security (legitimate interest/legal obligation).

  • Marketing communications (consent): newsletters, updates and offers. In the EU, I will only contact you if you have opted in. You can unsubscribe at any time.

  • Basic website analytics (legitimate interest/consent, depending on cookies): improving the site and your experience.

Who do I share data with?

  • Shopify (store/hosting platform, checkout, security).

  • Payment providers (e.g. card services) that process payments securely.

  • Logistics and courier services (for deliveries and returns).

  • Email marketing and support tools (if you subscribe).

All act as processors and handle data only under my instructions. If I use advanced Shopify features (e.g. personalised advertising within their ecosystem), Shopify may act as a joint controller for some processing. You can learn more and exercise your rights directly with Shopify through their Privacy Portal.

International transfers

Some providers may be located outside the EEA. In those cases, recognised safeguards are used (e.g. Standard Contractual Clauses).

Cookies

I use essential technical cookies, and—with your consent—cookies for analytics and marketing.

You can manage or refuse them via the cookie banner.
See more in my Cookie Policy.

Data retention

I keep data for as long as necessary to: perform the contract, comply with warranty and legal (tax/accounting) obligations. Afterwards, I either block or anonymise it.

Your rights (GDPR/EU)

You have the right to:

  • Access, rectification, erasure, objection, and restriction of processing.

  • Data portability, and to withdraw consent where consent is the legal basis.

You can exercise these rights by emailing me at bea@beacordero.art

Minors

My shop is not intended for minors. If you are a parent/guardian and believe a child has provided me with data, please contact me and I will delete it.

Changes to this policy

If there are significant changes, I will publish them here and update the “Last updated” date.

Privacy contact: bea@beacordero.art