Skip to content

Sent from Barcelona. Every lot is one of a kind.

Privacy policy

This policy explains what personal data we collect when you visit or buy from vintageandantiquetiles.com, why we use it, and what your rights are. We only keep what we need to send you your tiles. Last updated: 6 October 2026.

Who is responsible for your data

Artevolution LLC is responsible for your data (the "data controller"). It's a company registered in the United States, but we run the shop from Spain, and we follow the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

For any question about your data, just email us.

What we collect

  • When you pay: at checkout, Stripe collects your name, email address, phone number, shipping address and payment details. Stripe passes us your name, email, phone number and address, and tells us your payment went through. We never see or store your full card details.
  • Your order: we keep a record of each order in our small order database, for example what you bought, the price and shipping cost, the date, your contact and shipping details, and the tracking number.
  • Emails: the emails we send you about your order, and any emails you send us.
  • Technical data: when you visit the site, our host Cloudflare processes your IP address and basic information about your browser and device, to deliver the pages and keep the site secure.
  • Your cart: it's stored in your own browser, not on our servers. See our Cookies page.

We don't use analytics, advertising or tracking tools. Besides the emails about your order, we may now and then email you about new lots, unless you tell us not to (see below).

Why we use it, and our legal basis

  • To take your payment, pack and ship your order, and email you the tracking number. Legal basis: we need it to carry out our contract with you (GDPR article 6.1.b).
  • To give your name, address and phone number to the carrier, and to fill in customs forms for parcels leaving the EU. Legal basis: our contract with you, and our legal duties for customs (article 6.1.b and 6.1.c).
  • To answer your messages, before or after you buy, and to handle cancellations, refunds and guarantee claims. Legal basis: our contract with you, or steps you ask us to take before buying, and our legal duties as a seller (article 6.1.b and 6.1.c).
  • To email you now and then about new lots similar to the ones you bought. Spanish law allows this for existing customers (Ley 34/2002, LSSI, article 21.2). Legal basis: our legitimate interest in telling customers about similar tiles (article 6.1.f). You can untick "Keep me updated about new tiles" in the cart before you pay, and every one of these emails has a link to unsubscribe. It's free and takes one click.
  • To keep accounting and tax records. Legal basis: legal obligation (article 6.1.c).
  • To keep the site and payments secure, prevent fraud, and defend ourselves if there is a legal claim. Legal basis: our legitimate interest in running a safe shop (article 6.1.f).

We don't sell your data, we don't share it with advertisers, and we don't make automated decisions about you.

Do you have to give us your data?

To sell and send you tiles, we need your name, email, shipping address and payment. Carriers may also need your phone number. Without them, we can't take your order.

Who we share it with

We only share what each of them needs:

  • Stripe processes payments. Stripe also uses some data for its own purposes, such as fraud prevention and meeting financial laws, under its own privacy policy.
  • Resend sends our emails, such as your order confirmation, the shipping email with your tracking number, and our occasional emails about new lots.
  • Cloudflare hosts the website and protects it from attacks.
  • Correos and courier companies deliver your parcel. They get your name, address and phone number.
  • Customs and tax authorities, for parcels leaving the EU, and whenever the law requires it.

Data outside the EU

Stripe, Resend and Cloudflare are US companies and may process data in the US or other countries. When your data leaves the European Economic Area, it is protected by the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

If we ship to you outside the EU, your name, address and parcel details travel with the parcel to the carriers and customs in your country. This is needed to deliver your order.

How long we keep it

  • Orders and accounting records: 6 years from the order, as accounting and tax laws require.
  • Emails with you: as long as we need them to deal with your question and any later cancellation or guarantee claim on that order. Then we delete them.
  • Technical data at Cloudflare: for a short time, as set by Cloudflare.
  • Your cart: in your browser, until you buy, remove the lots or clear your browser data.

Stripe keeps its own payment records for as long as financial laws require.

Your rights

You can ask us at any time to:

  • show you the data we hold about you and give you a copy (access),
  • correct data that is wrong (rectification),
  • delete your data (erasure), unless the law says we must keep it, as with accounting records,
  • limit how we use it (restriction),
  • stop using it where we rely on our legitimate interest (objection),
  • give you the data you gave us in a common format, or send it to someone else (portability).

Just email us at artevolution70@proton.me. It's free, and we'll reply within one month. We may ask you for something to confirm it's really you.

If you're not happy with how we handle your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es. If you live in another EU country, you can also complain to the data protection authority there. We'd be grateful for the chance to sort it out with you first.

Keeping your data safe

The site uses an encrypted connection (HTTPS). Our order records are behind a password-protected admin login. We work with well-known providers and keep only the data we need.

Etsy

We also sell on Etsy. If you buy from us there, Etsy's own privacy policy applies to your use of Etsy, and we use the order details Etsy gives us only to send your order and keep our records.

For now, the product photos on this website are loaded from Etsy's image servers. When your browser loads a photo, Etsy receives your IP address and basic browser information, as any website would.

Cookies

We only use what the site needs to work. See our Cookies page.

Changes to this policy

If we change how we use your data, we'll update this page and the date at the top.