Legal
Privacy Policy
Last updated: January 2025
Who We Are
Tilwen is an independent gallery. When you use this website or contact us, you are dealing directly with the gallery. We can be reached at hello@tilwen.com.
What Data We Collect
We collect personal data only when you provide it to us directly, through the inquiry form, by email, or in the course of a transaction. This data may include your name, email address, business name, delivery address, and the content of your inquiry or correspondence.
We do not use cookies for tracking or advertising. We do not use analytics tools that collect individual user data. We do not run retargeting or behavioural advertising campaigns.
Basic server logs are retained for security and performance purposes. These logs include IP addresses and page request information. They are not used to identify individuals and are deleted automatically after 30 days.
How We Use Your Data
Data you provide is used solely to respond to your inquiry, process a transaction, or communicate about an existing relationship. We do not sell, share, or disclose your personal data to third parties except as required by law or as necessary to complete a transaction (for example, providing a delivery address to a shipping company).
We do not send marketing emails unless you have explicitly requested to be on a notification list for new inventory. If you have done so, you can unsubscribe at any time by replying to any email or contacting us directly.
Data Retention
Inquiry and transaction records are retained for as long as necessary to support the relationship and to meet legal obligations (typically 7 years for financial records). If you would like your data deleted, contact us and we will do so subject to any legal retention requirements.
Your Rights
You have the right to request access to the personal data we hold about you, to correct inaccurate data, to request deletion, and to object to processing. To exercise any of these rights, contact us at hello@tilwen.com. We will respond within 30 days.
Third-Party Services
This website is hosted on Vercel. Our email is processed via standard email providers. Payment processing, when applicable, is handled by PCI-compliant third-party processors. These services have their own privacy policies governing data they handle.
Changes to This Policy
We may update this policy from time to time. Material changes will be noted with an updated date at the top of this page. Continued use of the site after changes are posted constitutes acceptance of the revised policy.