Ver en Castellano

Privacy Policy

Last updated: 4/1/2026

Table of contents

Data Controller

BF4 ART S.L.
NIF: B-70662325
C/ Barra de Ferro, 4 Bajo 2, 08003 Barcelona, Spain
Email: info@bf4gallery.com

Data We Collect

  • Contact Information: Name, email address, phone number, and shipping/billing address provided during checkout or via contact forms.
  • Transaction Data: Details about payments (processed securely via Stripe) and purchases made.
  • Technical Data: IP address, browser type, and usage patterns collected through cookies (see our Cookie Policy).

We process your data based on:

  • Contractual Necessity: To process your orders, manage shipping, and provide customer support.
  • Legal Obligation: To comply with tax, accounting, and anti-money laundering regulations.
  • Consent: For newsletter subscriptions and marketing communications (which you can withdraw at any time).
  • Legitimate Interest: To improve our website performance and protect against fraud.

Your Rights

Under the GDPR, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure (Right to be Forgotten): Request deletion of your data where applicable.
  • Restriction: Request that we limit the processing of your data.
  • Data Portability: Request transfer of your data to another service.
  • Objection: Object to processing based on legitimate interests or direct marketing.

To exercise these rights, please contact us at info@bf4gallery.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Data Retention

We retain transaction data for the period required by Spanish tax law (generally 6 years). Newsletter data is kept until you unsubscribe.

Third Parties and Security

We share data only with essential service providers:

  • Stripe: For secure payment processing.
  • Shipping Carriers: To deliver your acquisitions.
  • Cloudinary/Vercel: For website hosting and media delivery.

We do not sell your personal data to third parties.