Privacy Policy of Lena + Lilo Website

1. Introduction
Lena + Lilo Art Gallery ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information.

2. Information We Collect
2.1 Personal Information
We collect personal information when you:

Make a purchase or lease artwork
Create an account
Contact customer support
Subscribe to newsletters

Collected information may include:

Name
Email address
Shipping address
Billing information
Payment details
IP address
Browser and device information

2.2 Data Collection Methods

Direct provision by you
Automatic collection through website interactions
Third-party service providers

3. How We Use Your Information
We use your personal information to:

Process and fulfill orders
Communicate about purchases
Provide customer support
Send marketing communications (with consent)
Improve our services
Detect and prevent fraud
Comply with legal obligations

4. Third-Party Services
We use the following third-party services:

4.1 Payment Processing

Stripe: Handles secure payment transactions
Processes credit card and digital payments
Complies with PCI DSS standards

4.2 Data Storage

MongoDB: Securely stores user and transaction data
Implements encryption and access controls
Follows data protection best practices

4.3 Email Services

Sends transactional and marketing emails
Manages communication preferences

4.4 Hosting and Infrastructure

Provides website and application hosting
Ensures website security and performance

5. Data Sharing and Disclosure
We may share your information:

With your consent
To comply with legal requirements
To protect our rights and property
With service providers under confidentiality agreements
In case of business transfer or acquisition

6. International Data Transfers
6.1 Global Operations
We operate globally and may transfer data between countries, including:

United States
European Economic Area
Other regions where we conduct business

6.2 Data Protection
We implement appropriate safeguards for international transfers, including:

Standard contractual clauses
Data encryption
Access controls

7. Your Rights and Choices
7.1 California Residents (CCPA)
You have the right to:

Know what personal information is collected
Delete personal information
Opt-out of data sales
Non-discrimination for exercising these rights

7.2 European Union Residents (GDPR)
You have the right to:

Access your personal data
Rectify inaccurate data
Erase your data
Restrict data processing
Data portability
Object to processing

7.3 Global User Rights

Withdraw consent for marketing
Request a copy of your data
Update your information

8. Data Security
We implement:

Encryption (in transit and at rest)
Regular security audits
Access controls
Secure payment gateways
Protection against unauthorized access

9. Cookies and Tracking
9.1 Cookie Usage
We use cookies to:

Enhance user experience
Analyze site traffic
Personalize content

9.2 Tracking Technologies

Web beacons
Analytics tools
Session management

You can manage cookie preferences through your browser settings.

10. Children's Privacy
Our site is not intended for children under 18. We do not knowingly collect data from children.

11. Data Retention
We retain personal information:

As needed to provide services
To comply with legal obligations
For legitimate business purposes

12. Changes to Privacy Policy
We may update this policy. Continued use of the site constitutes acceptance of changes.

13. Contact Information
For privacy-related inquiries:
Email: art.upside034@passinbox.com

14. Consent
By using our site, you consent to this Privacy Policy.

Last Updated: February 2025