PRIVACY POLICY & COOKIE POLICY
Last Updated: 25 June, 2026
1. DATA CONTROLLER
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – "GDPR"), the Data Controller is:
Germaine Stafford
Via Calcara 1
80051 Agerola (NA)
Italy
VAT Number (Partita IVA): 07671571219
Email: gemstaff@hotmail.com
(hereinafter referred to as the "Data Controller")
PRIVACY POLICY
2. PURPOSE OF DATA PROCESSING
The Data Controller collects and processes personal data solely for the following purposes:
Processing and fulfilling orders;
Selling original artworks and fine art prints;
Managing artwork reservations;
Creating commissioned artworks;
Providing customer support;
Shipping purchased products;
Complying with Italian tax and accounting obligations;
Processing payments;
Preventing fraud;
Sending newsletters and marketing communications (only with the user's consent);
Improving the operation, performance and security of the Website.
3. PERSONAL DATA COLLECTED
The Website may collect the following categories of personal data:
Full name;
Billing address;
Shipping address;
Email address;
Telephone number;
Order details;
Shipping information;
Purchase history;
IP address;
Website usage data;
Technical cookies and other cookies where consent has been provided.
The Data Controller does not store or process payment card details directly.
All payment transactions are securely processed through certified third-party payment providers.
4. LEGAL BASIS FOR PROCESSING
Personal data is processed on one or more of the following legal grounds:
Performance of a contract;
Compliance with legal obligations;
Consent (for newsletters and non-essential cookies);
Legitimate interest in maintaining Website security, preventing fraud and improving services.
5. HOW PERSONAL DATA IS PROCESSED
Personal data is processed using electronic and organisational measures designed to ensure confidentiality, integrity and security.
Appropriate technical and organisational safeguards are implemented to prevent unauthorised access, disclosure, alteration or loss of personal information.
6. DATA RETENTION
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, accounting and tax obligations.
Marketing data will be retained until consent is withdrawn.
7. WHO MAY RECEIVE YOUR DATA
Personal data may be shared only where necessary with trusted service providers involved in operating the business, including, but not limited to:
Accountant;
Tax advisers;
Shipping companies and couriers;
Print-on-Demand providers;
Payment service providers;
Website hosting providers;
Email platform;
IT service providers;
Public authorities where required by law.
Personal data will NEVER be sold to third parties.
8. INTERNATIONAL DATA TRANSFERS
Some service providers may process personal data outside the European Economic Area (EEA).
Where this occurs, transfers will take place only in accordance with Articles 44–49 of the GDPR and using appropriate legal safeguards.
9. YOUR RIGHTS
Under the GDPR you have the right to:
Access your personal data;
Correct inaccurate data;
Request deletion of your data;
Restrict processing;
Object to processing;
Request data portability;
Withdraw consent at any time where processing is based on consent.
Requests may be submitted by email to:
gemstaff@hotmail.com
10. RIGHT TO LODGE A COMPLAINT
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.
For Italy, this is:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
COOKIE POLICY
11. WHAT ARE COOKIES?
Cookies are small text files stored on your device when you visit a website.
They help websites function correctly, improve user experience and provide analytical information about website usage.
12. TYPES OF COOKIES USED
The Website may use the following categories of cookies:
Essential Cookies
These cookies are necessary for the proper operation of the Website.
Examples include:
Shopping cart functionality;
Secure checkout;
User authentication;
Language preferences;
Website security.
These cookies do not require user consent.
Preference Cookies
These cookies remember user preferences and settings.
Where required by law, they are used only with your consent.
Analytics Cookies
Analytics cookies help us understand how visitors use the Website in order to improve its performance.
These cookies are used only after obtaining your consent where legally required.
Marketing Cookies
Marketing cookies may be used to measure advertising effectiveness or provide personalised content. At present, the Website may not use marketing cookies. Should this change, your prior consent will be obtained before they are activated.
13. COOKIE CONSENT
When you first visit the Website, you will be presented with a cookie banner allowing you to:
Accept all cookies;
Reject non-essential cookies;
Customise your cookie preferences.
You may change or withdraw your consent at any time through the cookie management tool available on the Website.
14. THIRD-PARTY SERVICES
The Website may use services provided by trusted third parties, including:
Squarespace
Stripe or Squarespace Payments
Prodigi Print-on-Demand provider
Flodesk Newsletter provider
Weglot translation platform
Google Analytics
Google Maps
Instagram
These services process personal data according to their own privacy policies.
15. CHANGES TO THIS POLICY
The Data Controller reserves the right to update this Privacy Policy and Cookie Policy at any time.
The latest version will always be available at:
CONTACT
For any questions regarding this Privacy Policy or the processing of personal data, please contact:
Germaine Stafford
Via Calcara 1
80051 Agerola (NA)
Italy
Email: gemstaff@hotmail.com
LANGUAGE
This Privacy Policy and Cookie Policy has been originally drafted in Italian.
An English translation is provided solely for the convenience of international visitors.
In the event of any discrepancy between the Italian and English versions, the Italian version shall prevail.