This policy explains what personal data Quenby collects, why, and what your rights are — both as a shopper, and as an artist or community applying to sell here.

Data controller

Quenby is operated by Emile Maccarrone, a sole trader registered in Portugal (NIF 275588947), Rua Torre do Leão 7, 2705-173 Colares, Portugal.

What we collect from shoppers

When you create an account, we store your name, email address, a securely hashed version of your password (never the password itself), the billing and delivery addresses you save, and the contents of your cart, so it's still there when you log in on another device.

When you place an order, we collect your name, delivery and billing address, email address, phone number (if provided), and your order history (items purchased, amounts, dates).

If you ask to be told when a piece is back in stock, we keep your email address and the piece you asked about. If you also tick the box for updates, we add you to our occasional emails. You can unsubscribe at any time.

If you reach the shop through a link from one of our campaigns (for example a newsletter or an ad), the campaign name in that link is remembered in your browser and saved with your order, so we can see which campaigns lead to orders. It is not shared with any tracking service.

What we collect from artists and communities

When you apply to sell on Quenby, we collect your name (or your community's name), biography or description, portrait or studio photos, email address, country and city, and details of the artworks you submit. This is used solely to review your application and, if accepted, to publish your profile and listings on the site.

Why we collect it

We use shopper data to run your account, process and deliver your order, communicate with you about it, and meet our legal and tax record-keeping obligations. We only send you updates if you opted in. We use applicant data to review and publish artist/community profiles. We don't use your data for anything beyond these purposes.

Who else sees it

Bank transfers go directly between your bank and ours. If card payment is available at checkout, your card details are handled directly by our payment processor, Stripe, under its own privacy policy — we never see or store your card details.

Emails (order confirmations, account messages and back-in-stock notices) are sent from our own mail server. The website and mail server run on a server we rent from Contabo GmbH, a German hosting company, which stores this data on our behalf.

We do not sell your personal data to anyone, ever.

How long we keep it

Order records are kept for as long as legally required for tax and accounting purposes. Your account is kept until you ask us to delete it. Artist/community application data is kept for as long as the profile stays published, or deleted on request if an application isn't accepted.

Cookies

This site uses only strictly necessary cookies and local storage: to keep you logged in, to remember your cart and your chosen language, and the campaign name described above — nothing else. We do not use Google Analytics or any other tracking or advertising cookies. If that ever changes, this policy will be updated to say so.

Your rights

Under GDPR, you have the right to access, correct, receive a copy of, or request deletion of your personal data, to object to how it's processed, and to withdraw your consent to updates at any time. To make a request, contact us at hello@quenby.eu.

You can also lodge a complaint with the Portuguese data protection authority, the CNPD (www.cnpd.pt).