Privacy Policy

1. Introduction

Welcome to XAMLIN ART ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at xamlinart.com and purchase original artwork from our online gallery.

XAMLIN ART is an online art gallery specializing in original, hand-drawn artwork from the Kurdistan Region. We operate exclusively online without a physical retail location, serving customers internationally with a special focus on Iraq and the Kurdistan Region.

2. Information We Collect

2.1 Personal Information

When you place an order or contact us, we may collect the following personal information:

• Full name
• Phone number (required for order processing and delivery coordination)
• Delivery address
• Email address (optional, for order confirmation and updates)
• Preferred language (English, Arabic, or Kurdish)
• Payment information (for advance payments when required)

2.2 Order Information

We collect details about your purchases including:

• Artwork selections and quantities
• Order tracking codes
• Payment method (Cash on Delivery or advance payment)
• Shipping preferences
• Order history

2.3 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent on site
• Referring website

3. How We Use Your Information

We use the collected information for the following purposes:

• Order Processing: To process and fulfill your artwork purchases
• Communication: To contact you regarding your order status, delivery arrangements, and customer service inquiries
• Payment Verification: To verify advance payments when Cash on Delivery requires partial prepayment
• Shipping Coordination: To arrange safe delivery of your artwork to your specified address
• Customer Service: To respond to your inquiries and provide support
• Legal Compliance: To comply with applicable laws and regulations
• Business Improvement: To understand customer preferences and improve our services
• Security: To protect against fraud and maintain the security of our website

4. Payment Security & Terms

As we primarily operate on a Cash on Delivery (COD) basis, your financial information is protected through the following measures:

• Cash on Delivery: Most orders are paid in cash upon delivery, minimizing online financial data exposure
• Advance Payments: For COD orders, we may require 25-50% advance payment to confirm the order. This payment is processed through secure, encrypted channels
• Online Payments: When full online payment is chosen, we use secure payment gateways that comply with international security standards
• No Storage: We do not store credit card or banking details on our servers

5. Data Protection & Storage

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: All data transmission is encrypted using SSL/TLS protocols
• Secure Storage: Your information is stored on Firebase, a Google Cloud Platform service with enterprise-grade security
• Access Control: Limited access to personal data, restricted to authorized personnel only
• Regular Updates: We maintain up-to-date security measures and regularly review our practices
• Data Retention: We retain your information only as long as necessary for business and legal purposes

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of any inaccurate or incomplete information
• Deletion: Request deletion of your personal data, subject to legal obligations
• Objection: Object to the processing of your personal data for marketing purposes
• Portability: Request transfer of your data to another service provider
• Withdrawal: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us using the information provided below.

7. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics)
• Preference Cookies: Remember your language selection and display preferences
• Shopping Cart: Maintain your cart items during your browsing session

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect website functionality.

8. Third-Party Services

We may share your information with trusted third-party services for:

• Shipping Partners: Local and international courier services for artwork delivery
• Payment Processors: Secure payment gateway providers for online transactions
• Analytics: Google Analytics for website performance monitoring
• Hosting: Firebase/Google Cloud Platform for website and data hosting

We ensure all third-party partners maintain appropriate security measures and use your data only for the specified purposes.

9. International Transfers

As we serve customers internationally, your information may be transferred to and processed in countries outside Iraq. We ensure appropriate safeguards are in place for international data transfers, including:

• Using services that comply with international data protection standards
• Implementing contractual clauses to protect your data
• Ensuring receiving countries have adequate data protection laws

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information about your child, please contact us immediately.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending notification to your email address (if provided)

We encourage you to review this policy periodically for any updates.

12. Legal Basis and Compliance

XAMLIN ART operates in compliance with applicable data protection laws and regulations. Our legal basis for processing your personal information includes:

• Contract Performance: Processing necessary to fulfill your artwork orders
• Legal Obligations: Compliance with tax, accounting, and other legal requirements
• Legitimate Interests: Our legitimate business interests in providing quality service
• Consent: Where you have provided explicit consent for specific processing activities

13. Dispute Resolution

In the event of any dispute regarding your privacy or this policy:

• We encourage you to first contact us directly to seek resolution
• We will investigate and attempt to resolve complaints and disputes within 30 days
• If unresolved, disputes will be subject to the laws of Iraq and the Kurdistan Region
• You may also have the right to lodge a complaint with relevant data protection authorities

14. Acknowledgment

By using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use our website or services.