Privacy Policy

What we collect

• Contact form: the name, email address and message you type, so the artist can reply.
• Analytics (only if you accept): pages viewed, referring page, approximate location (city/country), device and browser type, and a random identifier stored in cookies.
• Security and technical data: IP address and browser user-agent in short-lived server logs, used to keep the site safe and prevent abuse.
• Artwork view counts: an aggregate counter per artwork. No personal identifier is attached to it.
• Admin account (staff only): name, email, a hashed password, and session data.

Why we collect it

• To answer your messages and print inquiries.
• To understand which artworks are popular and improve the gallery.
• To keep the site secure and available.
• To operate the storefront and comply with our legal obligations.

Cookies

We use a small number of cookies. Essential cookies are required for the site to work; analytics cookies are only set if you accept them.

• lang — remembers your language choice (essential).
• cookie_consent — remembers your analytics choice (essential).
• __Secure-better-auth.session_token — keeps the admin signed in (essential, staff only).
• _ga, _ga_* — Google Analytics, only set after you accept (analytics).

Your consent

Analytics cookies are set only after you click “Accept”. You can decline — the site works normally without analytics — and you can change your choice at any time using the “Cookie settings” link in the footer.

Sharing and third parties

We never sell your personal information. We share limited data with:

• SendGrid — delivers your contact message to the artist by email (processing may occur in the United States).
• Google Analytics — website analytics, only if you consent (Google, outside Canada).
• Cloudflare — DNS, reverse proxy and security for the site (may process connection data such as IP address).
• Pictorem — print fulfilment. This only applies once you click “Buy on Pictorem”, which takes you to their own website governed by their policy.

Where your data is stored

The website, its database and the artwork files are hosted on our own server located in Canada, in Québec. The only exceptions are the third-party services listed above (SendGrid and Google Analytics), which may process limited data outside Canada as described.

How long we keep it

• Contact messages: kept in the artist’s mailbox for as long as needed to answer you and for reasonable record-keeping.
• Analytics: up to 14 months (Google Analytics default retention).
• Server logs: kept short-term for security.
• Admin account data: kept while the account exists.

Your rights

Subject to applicable law, you have the right to access the personal information we hold about you, to have it corrected, to request its deletion, to receive it in a structured and commonly used format (portability), to withdraw your consent to analytics, and to be informed of how your information is handled. To exercise any of these rights, contact our Privacy Officer below.

Privacy Officer

Questions or requests about your personal information can be sent to the person responsible for the protection of personal information:

• Jonathan Huot — [email protected]

Complaints

If you are not satisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or with the privacy authority of your jurisdiction.

Changes to this policy

We may update this policy from time to time. The date of the latest revision is shown at the top of this page, and material changes will be announced here.