Privacy Policy

1. Information We Collect

We collect information you provide directly to us, and a small amount of information collected automatically:

• Account details — name, email address, phone/Telegram number, and country of residence when you register or sign in.
• Inquiry and order details — the artwork, accessory, mural, or ceramics service you request, your shipping preferences, and any message you send us.
• Reviews — your name and the text of any review you submit for a completed order.
• Technical data — IP address, browser type, and pages visited, collected automatically via Google Analytics for site performance and security purposes (for example, rate-limiting repeated login attempts).

2. How We Use Your Data

Your information is used exclusively to:

• Process artwork, accessory, mural, or ceramics inquiries and coordinate secure packing and courier shipping.
• Send one-time passwords (OTP) by email to verify your account and secure sign-in.
• Maintain your saved wishlist and inquiry history in your private client dashboard.
• Issue official Certificates of Authenticity registered under your name for purchased original artworks.
• Respond to contact-form messages and service requests.
• Understand aggregate site usage (via Google Analytics) so we can improve the gallery and catalogue.
• Count visits with our own anonymous statistics (page, country and city from your IP, referring site, device type and language). No cookies are used and your IP address is not stored; a daily-changing anonymous code lets us count unique visitors without recognising you on another day.

3. Cookies and Similar Technologies

We use essential cookies to keep you signed in and remember your language, currency and country preferences, and analytics cookies (Google Analytics) to understand how visitors use the site. Visitors from the EU, EEA, UK and Switzerland are asked first: analytics cookies are only set after you click "Accept", and you can change your choice at any time via "Cookie settings" at the bottom of every page (declining also removes analytics cookies already set). You can also control cookies through your browser settings; disabling essential cookies may limit features such as staying signed in.

4. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties for advertising. We share limited data only with service providers who process it on our behalf, strictly to operate the site:

• Website and database hosting (Vercel, Neon) — servers in Frankfurt, Germany.
• Image storage (Vercel Blob) for artwork photos.
• Email delivery (Resend) for verification codes, replies and notifications.
• Spam and abuse protection (Upstash): short-lived counters of sign-in and form attempts, deleted automatically after at most a few hours.
• Error monitoring (Sentry, EU data region): technical reports when something on the site breaks, without IP addresses or other personal details.
• Website analytics (Google Analytics): anonymous usage statistics, subject to your cookie choice.
• AI translation (Google Gemini, Google Translate), used only for catalogue text such as painting descriptions — never for your personal messages.
• AI assistant (Google Gemini): if you use the chat assistant on the site, your questions are sent to Google Gemini to generate answers, and the conversation is stored so the gallery can review it and improve the service. It is not linked to your name or account — please do not share personal details in it.

5. Data Retention

We retain account and order information for as long as your account is active or as needed to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account at any time (see Section 7).

6. Data Protection and Security

We protect your personal details in accordance with the laws of the Republic of Uzbekistan and industry-standard technical safeguards: encrypted connections, hashed passwords and verification codes, rate-limited sign-in attempts, and encrypted daily backups kept for 30 days. No online system is completely risk-free, but we take reasonable steps to protect your data from unauthorized access.

7. Your Rights

You may request to access, correct, or delete the personal data we hold about you, or ask questions about how it is used, by contacting us using the details below. We will respond within a reasonable time.

8. Children's Privacy

Art Qala services are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The "Effective Date" above indicates when this policy was last revised. Continued use of the site after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions regarding your data or wish to request deletion of your account, contact our data curator at: or visit our gallery at Barakhon Madrasah, Tashkent.