Privacy Policy
1. Overview
Welcome to Luminous Fine Art by Krasimir Ganchev! The terms “we”, “us” and “our” refer to Luminous Fine Art by Krasimir Ganchev (“Luminous Fine Art”). Luminous Fine Art operates this store and website, including all related information, content, features, tools, products and services (the “Services”). The Services are powered by Shopify. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.
2. Personal Information We Collect or Process
- Contact details (name, billing and shipping address, phone, email).
- Financial information (payment card details processed by our payment providers, transaction details).
- Account information (username, password, preferences and settings).
- Transaction information (items viewed, added to cart or wishlist, purchased, returned, exchanged, or cancelled; order history).
- Communications (information you include when contacting us for support or other inquiries).
- Device information (browser, device type, network, IP address, unique identifiers).
- Usage information (how you navigate and interact with the Services).
- Room‑mockup materials you provide for custom visualizations (photos/measurements of your space).
- Edition and provenance information for Certificates of Authenticity and our Edition Tracking Ledger (e.g., purchaser contact details, edition number, date of issue).
3. Personal Information Sources
- Directly from you (creating an account, making a purchase, contacting us, providing room photos for mockups).
- Automatically through the Services (via your device and cookies/SDKs/pixels).
- From service providers (e.g., payments, shipping, cloud hosting, analytics, customer support).
- From partners or other third parties (e.g., advertising or social integrations, where applicable).
4. How We Use Your Personal Information
- Provide, tailor, and improve the Services (fulfill orders, process payments, ship items, manage accounts, remember preferences, recommend products, handle returns/exchanges).
- Marketing and advertising (send emails/SMS/postal mail with your consent where required; show ads on our Services or others based on your activity).
- Security and fraud prevention (authenticate accounts, detect and investigate suspicious or illegal activity, protect our customers and Services).
- Communicate with you (customer support, service messages, updates).
- Legal reasons (comply with law, respond to lawful requests, enforce our terms, and protect our rights).
5. Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify and certain third parties (which may be located in other countries) in order to provide and improve the Services. We may also use Shopify features that incorporate data from your interactions with our store and with other merchants using Shopify. In those cases, Shopify is responsible for that processing, including responding to your requests regarding those uses. To learn more about Shopify’s practices and your rights, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
6. Third‑Party Websites and Links
The Services may link to websites, apps, or online platforms operated by third parties. If you follow those links or use embedded widgets or social logins, your interactions are governed by the third party’s terms and privacy policies—not ours. We do not control, endorse, or assume responsibility for third‑party content or practices. Information you share on public or semi‑public venues (including social networks) may be visible to others. We encourage you to review the privacy policies of any third‑party sites or services before providing personal information.
7. Cookies & Tracking Technologies
We use cookies and similar technologies (pixels, tags, SDKs) to operate the Services, measure performance, and personalize content/ads. You can manage preferences at any time via your browser settings and any Cookie Settings tool we provide. We honor the Global Privacy Control (GPC) signal; when received, we treat it as an opt‑out for that browser/device (and your account if matched).
8. Legal Bases for Processing (EEA/UK Residents)
- Contract: to provide the Services, process orders, and support you.
- Legitimate interests: fraud prevention, site security, analytics, improving our Services (balanced against your rights).
- Consent: non‑essential cookies, email/SMS marketing (you can withdraw at any time).
- Legal obligation: tax, accounting, and regulatory compliance.
9. How We Disclose Personal Information
- With Shopify and other service providers (IT, payments, analytics, email, fulfillment/shipping, cloud storage).
- With business/marketing partners to provide marketing services and show ads (subject to your choices).
- When you direct us to share (e.g., shipping carriers, social media widgets, or integrations you use).
- Within our corporate group or in connection with a business transaction (e.g., merger).
- To comply with law, enforce our terms, or protect our rights, users, or the public.
10. Sale/Share Statement & Your Advertising Choices
We do not sell personal information. We may “share” limited identifiers for cross‑context behavioral advertising when we use certain Shopify advertising features (e.g., Shopify Audiences). Where applicable, you can opt out via our “Do Not Sell or Share My Personal Information” link, by adjusting Cookie Settings, and via the Global Privacy Control signal.
11. Custom Visualizations (Room Mockups)
If you request a room mockup, you may provide photos and measurements of your space. We use these solely to create previews for you, do not publish or reuse them, and delete them 90 days after project completion (or sooner upon request).
12. Edition Ledger & Certificates of Authenticity
For Limited Editions, Artist Proofs, and Studio Proofs, we maintain a private ledger to issue Certificates of Authenticity and preserve provenance (edition number, title, materials, date of issue, purchaser contact details). If you transfer ownership, you may notify us to update the ledger.
13. Security and Retention of Your Information
- Orders and tax/financial records: 7 years.
- Customer accounts: for the life of the account and 24 months of inactivity thereafter.
- Marketing contacts: until you opt‑out or after 24 months of inactivity.
- Customer support messages: 24 months.
- Server logs/security data: 12 months.
- Custom visualization files: 90 days after project completion (or sooner upon request).
14. Your Rights and Choices
- Access/know, delete, correct, or port your personal information (where applicable).
- Opt out of “sale”/“sharing” for targeted advertising (where applicable) and manage communications preferences.
- Exercise rights via the Services or our Contact page. We may verify your identity and may deny requests as permitted by law. You may designate an authorized agent, subject to verification.
- Opt‑out of marketing emails via the unsubscribe link. Enable Global Privacy Control for supported opt‑outs.
- Manage cookies via your browser and Cookie Settings.
15. Children’s Data
The Services are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their information. If you believe a child provided information, please contact us and we will delete it.
16. Automated Decision‑Making
We do not make decisions that produce legal or similarly significant effects about you solely by automated means.
17. International Transfers
We may transfer, store, and process personal information outside your country. If we transfer personal data out of the EEA/UK, we rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses (and the UK equivalents), unless the destination has an adequacy decision.
18. Complaints and Appeals
If you have concerns about how we process your information, please contact us. Depending on where you live, you may have the right to appeal our decision by contacting us, or to lodge a complaint with your data protection authority.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, regulatory, or operational reasons. We will post the revised policy, update the “Last updated” date, and provide notice as required by law.
20. Contact
If you have questions about this Privacy Policy or our practices, or if you would like to exercise your rights, please contact us via our Contact page.