Palisander respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use and protect personal data when you visit our website, contact us, make an enquiry or purchase from us.

Palisander is operated by Crafty Stitches Unipessoal, Lda, a company incorporated in Portugal with registered office at Rua Imprensa à Estrela 1, Lisboa 1200-684, company/NIPC number [TO COME] (“Palisander”, “we”, “us” or “our”).

For the purposes of applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Palisander is the data controller in relation to the personal information described in this policy.

Information we collect

Depending on how you interact with us, we may collect:

• your name and contact details, including email address, telephone number, billing address and delivery address;

• information relating to purchases, enquiries, orders, payments, deliveries and returns;

• correspondence between you and Palisander;

• information you provide when subscribing to our mailing list or other communications;

• technical information relating to your use of our website, such as IP address, browser type, device information and website activity; and

• information collected through cookies and similar technologies, where applicable.

Payment information may be processed directly by our payment service providers. Palisander does not ordinarily retain complete payment card details.

How we use your information

We may use your personal information to:

• respond to enquiries and communicate with you;

• process and fulfil purchases and orders;

• arrange payment, packing, shipping, delivery, insurance and, where necessary, customs documentation;

• provide customer service and manage returns or other after-sales matters;

• maintain appropriate business, accounting and transaction records;

• operate, maintain, secure and improve our website and services;

• prevent fraud, misuse or other unlawful activity;

• comply with legal, regulatory, tax and accounting obligations; and

• send news, updates or marketing communications where you have consented to receive them or where otherwise permitted by law.

You may unsubscribe from marketing communications at any time using the unsubscribe facility provided in the communication or by contacting us.

Legal basis for processing

Under the GDPR, we process personal information only where we have an appropriate legal basis.

Depending on the circumstances, this may be because:

• processing is necessary to enter into or perform a contract with you, including fulfilling an order;

• processing is necessary for us to comply with a legal obligation;

• you have given us your consent; or

• processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include operating and protecting our business and website, responding to customers and potential customers, maintaining appropriate business records and improving our services.

Sharing your information

We do not sell your personal information.

We may share personal information where necessary with trusted third parties who provide services to us, including:

• payment service providers;

• banks and financial institutions;

• website hosting and e-commerce providers;

• IT and technology service providers;

• email and communications providers;

• professional advisers, including accountants and legal advisers;

• packing, transport, courier, shipping and insurance providers; and

• customs, tax, regulatory or other public authorities where required.

We provide these parties only with information reasonably necessary for them to perform the relevant service or where disclosure is otherwise required or permitted by law.

International transfers

Palisander is based in Portugal but works with customers and service providers internationally.

In some circumstances, your personal information may therefore be transferred to or processed in countries outside the European Economic Area (“EEA”). Where this occurs, we take appropriate measures to ensure that personal information remains protected in accordance with applicable data protection law.

Where required, these measures may include transferring information to countries recognised by the European Commission as providing an adequate level of data protection or using appropriate contractual safeguards.

Information necessary to fulfil an international order may also be provided to relevant carriers, customs authorities or other parties where necessary for the performance of the transaction.

How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling transactions and meeting legal, tax, accounting and regulatory requirements.

Retention periods may therefore vary according to the nature of the information and our legal obligations.

Where information is no longer required, we will delete it or otherwise dispose of it securely, subject to any legal requirement to retain it.

Cookies

Our website may use cookies and similar technologies to enable essential website functions, understand how the website is used and, where applicable, improve the experience of visitors.

Some cookies are necessary for the website to function. Other cookies, including analytics or marketing cookies, will be used in accordance with applicable consent requirements.

Further information about the cookies used on this website and how you can manage your preferences is available in our Cookie Policy [link].

Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

While we take reasonable precautions to protect information, no internet-based system can be guaranteed to be completely secure.

Your rights

Under the GDPR, you may have the right to:

• request access to the personal information we hold about you;

• request correction of inaccurate or incomplete information;

• request deletion of your personal information in certain circumstances;

• request restriction of the processing of your information;

• object to certain processing, including processing based on legitimate interests and direct marketing;

• request the transfer of certain personal information to you or another organisation;

• withdraw consent at any time where processing is based on consent; and

• lodge a complaint with the relevant data protection supervisory authority.

These rights are subject to certain legal conditions and exceptions.

To exercise your rights or ask a question about how we use your personal information, please contact us at:

Palisander, Crafty Stitches Unipessoal, Lda
Rua Imprensa à Estrela 1, 1 RC Esq, Lisboa, 1200-684, Portugal

Email: enquiries@gallerypalisander.com

As Palisander is established in Portugal, you also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection supervisory authority.

Third-party websites

Our website may contain links to websites operated by third parties. Palisander is not responsible for the privacy practices or content of those websites, and we recommend reviewing their privacy policies separately.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal obligations.

The latest version will be published on this page and identified by the date shown above.

Contact

If you have any questions about this Privacy Policy or the way Palisander handles personal information, please contact us at enquiries@gallerypalisander.com