Privacy Policy

1. Information We Collect

We collect information you provide directly to us, and a small amount of information collected automatically:

• Account details — name, email address, phone/Telegram number, and country of residence when you register or sign in.
• Inquiry and order details — the artwork, accessory, mural, or ceramics service you request, your shipping preferences, and any message you send us.
• Reviews — your name and the text of any review you submit for a completed order.
• Technical data — IP address, browser type, and pages visited, collected automatically via Google Analytics for site performance and security purposes (for example, rate-limiting repeated login attempts).

2. How We Use Your Data

Your information is used exclusively to:

• Process artwork, accessory, mural, or ceramics inquiries and coordinate secure packing and courier shipping.
• Send one-time passwords (OTP) by email to verify your account and secure sign-in.
• Maintain your saved wishlist and inquiry history in your private client dashboard.
• Issue official Certificates of Authenticity registered under your name for purchased original artworks.
• Respond to contact-form messages and service requests.
• Understand aggregate site usage (via Google Analytics) so we can improve the gallery and catalogue.

3. Cookies and Similar Technologies

We use essential cookies to keep you signed in and remember your language/currency preference, and analytics cookies (Google Analytics) to understand how visitors use the site. You can control cookies through your browser settings; disabling them may limit some site features such as staying signed in.

4. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties for advertising. We share limited data only with service providers who process it on our behalf, strictly to operate the site:

• Cloud hosting and database providers (Vercel, Neon) that store the site and its data.
• Image hosting (Cloudinary) that stores artwork and uploaded photos.
• Email delivery (Resend) that sends OTP codes and notification emails.
• AI-assisted translation and image tools (Google Gemini) used to prepare multilingual catalogue text — never your personal messages.

5. Data Retention

We retain account and order information for as long as your account is active or as needed to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account at any time (see Section 7).

6. Data Protection and Security

We protect your personal details in accordance with the laws of the Republic of Uzbekistan and industry-standard technical safeguards (encrypted connections, hashed passwords, and rate-limited sign-in attempts). No online system is completely risk-free, but we take reasonable steps to protect your data from unauthorized access.

7. Your Rights

You may request to access, correct, or delete the personal data we hold about you, or ask questions about how it is used, by contacting us using the details below. We will respond within a reasonable time.

8. Children's Privacy

Art Qala services are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The "Effective Date" above indicates when this policy was last revised. Continued use of the site after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions regarding your data or wish to request deletion of your account, contact our data curator at: privacy@artqala.uz or visit our gallery at Barakhon Madrasah, Tashkent.