This privacy notice for Neferko Art (“we,” “us,” or “our”) outlines how and why we collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at www.neferkoart.com, or any website of ours that links to this privacy notice

• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our services. If you have any questions or concerns, please contact us at neferko.art@gmail.com
​
1. WHAT INFORMATION DO WE COLLECT?
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, participate in activities regarding our services, or when you contact us.
Personal Information Provided by You: The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. This may include:

• Names

• Email addresses

• Mailing addresses

• Billing addresses

• Debit/credit card numbers

• Phone numbers

Payment Data: We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by PayPal. You may find their privacy notice here.
​
Information Automatically Collected: We automatically collect certain information when you visit, use, or navigate our services. This information does not reveal your specific identity (such as your name or contact information) but may include device and usage information, such as your IP address, browser, and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our services, and other technical information. This information is primarily needed to maintain the security and operation of our services, and for internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:

• Log and Usage Data: This is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings, and information about your activity in the services (such as the date/time stamps associated with your usage, pages, and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).

• Device Data: We collect device data such as information about your computer, phone, tablet, or other device you used to access our services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

• Location Data: We collect location data, such as information about your device’s location, which can be precise or imprecise. The amount of information we collect depends on the type and settings of the device you used to access our services. You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of our services.

​
2. HOW DO WE PROCESS YOUR INFORMATION?
We process your personal information for various reasons, depending on how you interact with our services, including:

• To deliver and facilitate the delivery of services to the user: We may process your information to provide you with the requested service.

• To respond to user inquiries and offer support: We may process your information to respond to your inquiries and resolve any potential issues you might have with the requested service.

• To fulfill and manage your orders: We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.

• To deliver targeted advertising: We may process your information to develop and display personalised content and advertising tailored to your interests, location, and more.

• To protect our services: We may process your information as part of our efforts to keep our services secure, including fraud monitoring and prevention.

• To save or protect an individual’s vital interests: We may process your information when necessary to save or protect an individual’s vital interests, such as to prevent harm.

​
3. WHAT LEGALITIES DO WE RELY ON TO PROCESS YOUR INFORMATION?
For EU or UK Residents:
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following legal bases:

• Consent: We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.

• Performance of a contract: We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our services or, at your request, prior to agreeing with you.

• Legitimate Interests: We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information to:

  • Develop and display personalised and relevant advertising content for our users

  • Diagnose problems and/or prevent fraudulent activities

• Legal Obligations: We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

• Vital Interests: We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

For Canada Residents:
We may process your information if you have given us specific permission (i.e., consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way,

• For investigations and fraud detection and prevention,

• For business transactions provided, certain conditions are met,

• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim,

• For identifying injured, ill, or deceased persons and communicating with next of kin,

• If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse,

• If it is reasonable to expect collection and use with consent would compromise the availability or accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province,

• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records,

• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced,

• If the collection is solely for journalistic, artistic, or literary purposes,

• If the information is publicly available and is specified by the regulations.

For Japan Residents:
Under the Japanese Act on the Protection of Personal Information, our services will handle acquired personal information within the scope necessary to achieve the purpose of use stated above in clause 2. If we handle personal information beyond the scope of its intended use, we will do so only after obtaining the consent of the individual concerned. However, this does not apply in the following cases:

•  When required by law.

•  When it is necessary to protect the life, body, or property of an individual and it is difficult to obtain the person’s consent.

• When it is necessary for the improvement of public health or the promotion of sound child development, and it is difficult to obtain the person’s consent.

• When it is necessary to cooperate with a national institution or local public body, or a person entrusted by them, in performing the affairs stipulated by law, and obtaining the person’s consent would likely hinder the performance of the affairs.

 
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
We share your personal information with service providers to help us deliver our services and fulfill our contractual obligations to you. For example:

• Wix: We use Wix to power our online shop. You can read more about how Wix handles your personal information here.

• PayPal: We use PayPal to process payments. You can read more about how PayPal handles your personal information here.

 
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
Cookies are small data files that are downloaded to your computer or device when you visit our site. We use various types of cookies, including functional, performance, advertising, and social media or content cookies. Additionally, we may employ cookies and similar tracking technologies (such as web beacons and pixels) to collect information when you interact with our services. These technologies help us maintain the security of our services, prevent crashes, fix bugs, save your preferences, and support basic site functions.
 
 
6. HOW LONG DO WE KEEP YOUR INFORMATION?
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than 30 days.
When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize it. If deletion or anonymization is not possible (for example, because your personal information is stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.
 
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
We have implemented appropriate and reasonable technical and organizational security measures to protect the personal information we process. However, despite our efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Therefore, we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. While we strive to protect your personal information, the transmission of personal information to and from our services is at your own risk. You should only access the Services within a secure environment.
 
8. COLLECTION OF INFORMATION FROM MINORS
We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using our services, you represent you are at least 18 years old or that you are the parent or guardian of a minor and their use of our services has your consent. If we learn that personal information from users under 18 years of age has been collected, we will deactivate the account and take reasonable measures to delete such data from our records. If you become aware that we may have collected data from minors under 18 years of age, please contact us at neferko.art@gmail.com.
 
9. WHAT ARE YOUR PRIVACY RIGHTS?
In certain regions (such as the EEA, UK, Switzerland, and Canada), you have specific rights under applicable data protection laws. These rights may include the ability to (i) request access to and obtain a copy of your personal information, (ii) request rectification or erasure of your personal information, (iii) restrict the processing of your personal information, (iv) request data portability, and (v) not be subject to automated decision-making. In some cases, you may also may object to the processing of your personal information. You can exercise these rights by contacting us using the details below.
We will review and act upon any request under applicable data protection laws.
If you are in the EEA or UK and believe we are processing your personal information unlawfully, you may lodge a complaint with your local data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing Your Consent: If we rely on your consent to process your personal information, you may withdraw that consent at any time. You can do so by contacting us using the details below. Please note that withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal, nor will it affect processing conducted on lawful grounds other than consent.
Cookies and Similar Technologies: Most web browsers are set to accept cookies by default. If you prefer, you can usually configure your browser to remove or reject cookies. However, doing so may affect certain features or services of our services.
If you have any questions or comments about your privacy rights, please email us at neferko.art@gmail.com.
 
10. HOW WE USE AND SHARE YOUR INFORMATION
Will your information be shared with anyone else?
We may share your personal information with our service providers under a written contract between us and each service provider.
We may use your personal information for our own business purposes, such as conducting internal research for technological development and demonstration. This use is not considered a “sale” of your personal information.
We have not disclosed, sold, or shared any personal information to third parties for business or commercial purposes in the past twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in some cases, we may decline your request as permitted by law. These rights include:

• The right to know whether we are processing your personal data

• The right to access your personal data

• The right to correct inaccuracies in your personal data

• The right to request the deletion of your personal data

• The right to obtain a copy of the personal data you previously shared with us

• The right to non-discrimination for exercising your rights

• The right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

Depending on the state where you live, you may also have the following rights:

• The right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including California’s privacy law)

• The right to limit the use and disclosure of sensitive personal data (as permitted by applicable law, including California’s privacy law)

How to Exercise Your Rights
To exercise these rights, you can contact us by submitting a data subject access request, emailing us at neferko.art@gmail.com, visiting our contact page, or referring to the contact details at the bottom of this document.
Under certain US state data protection laws, you can designate an authorised agent to make a request on your behalf. We may deny a request from an authorised agent that does not submit proof that they have been validly authorised to act on your behalf under applicable laws.
 
11. PRIVACY RIGHTS OF OTHER REGIONS
Japan
Under the Japanese Act on the Protection of Personal Information, our services will handle acquired personal information within the scope necessary to achieve the purpose of use stated above in clause 2. If we handle personal information beyond the scope of its intended use, we will do so only after obtaining the consent of the individual concerned. However, this does not apply in the following cases:

•  When required by law.

•  When it is necessary to protect the life, body, or property of an individual and it is difficult to obtain the person’s consent.

• When it is necessary for the improvement of public health or the promotion of sound child development, and it is difficult to obtain the person’s consent.

• When it is necessary to cooperate with a national institution or local public body, or a person entrusted by them, in performing the affairs stipulated by law, and obtaining the person’s consent would likely hinder the performance of the affairs.

• ​

Australia and New Zealand
We collect and process your personal information in accordance with the obligations and conditions set by Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020 (Privacy Act). This privacy notice meets the requirements defined in both Privacy Acts, detailing what personal information we collect from you, the sources of this information, the purposes for which we use it, and the recipients of your personal information.
If you choose not to provide the personal information necessary to fulfill these purposes, it may impact our ability to offer you certain services, such as:

• Providing the products or services you request

• Responding to or assisting with your inquiries

You have the right to request access to or correction of your personal information at any time. You can make such a request by contacting us using the details provided below.
If you believe we are unlawfully processing your personal information, you have the right to submit a complaint to the Office of the Australian Information Commissioner for breaches of the Australian Privacy Principles, or to the Office of the New Zealand Privacy Commissioner for breaches of New Zealand’s Privacy Principles.
​
12. UPDATES TO THIS NOTICE
We reserve the right to modify this privacy policy at any time. Changes and clarifications will take effect immediately upon their posting on the website. If we change this policy, we will make a notification here, on our website.
​
13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
If you are from the US: Depending on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.