Allec Petrescu Art

Privacy Policy & Shipping Policy for Artwork Last updated: July 25, 2026

1. Scope and Applicable Law This Privacy Policy applies to allecpetrescuart.com (the “Site”), operated by Allec Petrescu Art, a company incorporated in Hong Kong SAR (“we,” “us,” or “our”). Because our visitors and customers are located worldwide, this policy is drafted to comply with: ● The Personal Data (Privacy) Ordinance, Cap. 486 of the Laws of Hong Kong (“PDPO”), as our company's home jurisdiction and primary data protection law. ● The General Data Protection Regulation (“GDPR”) of the European Union, to the extent we offer goods or services to, or monitor the behavior of, individuals located in the EU/EEA. ● The California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), for California residents. ● The Ley Federal de Protección de Datos Personales en Posesión de los Particulares (“LFPDPPP”), for residents of Mexico. Where these laws impose different or additional obligations, we apply the standard most protective of the individual in question. 2. Personal Information We Collect 2.1 Device Information When you visit the Site, we automatically collect information about your device, including your web browser, IP address, time zone, and certain cookies installed on your device. We also collect information about the pages or products you view, what site or search terms referred you here, and how you interact with the Site. We refer to this as “Device Information.” We collect it using: ● Cookies — data files placed on your device, often including a unique identifier. Learn more at www.allaboutcookies.org. ● Log files — track actions on the Site, including IP addresses, browser type, Internet service provider, referring/exit pages, and timestamps. ● Web beacons, tags, and pixels — electronic files that record browsing interactions with the Site. 2.2 Order Information When you make or attempt a purchase, we collect: name, billing address, shipping address, payment information (credit card, debit card, bank transfer, or check), email address, and phone number (“Order Information”). “Personal Information” in this policy means both Device Information and Order Information. 3. How We Use Your Personal Information We use Order Information to: ● Fulfill orders, including processing payment, arranging shipping, and providing invoices or confirmations. ● Communicate with you about your order or inquiries. ● Screen transactions for potential fraud or risk. ● Provide marketing materials by email, consistent with your preferences and consent. We use Device Information to: ● Monitor Site activity for fraud, security, and abuse prevention. ● Improve and optimize the Site, including analytics on browsing behavior and the effectiveness of our advertising. 4. Legal Basis for Processing (GDPR) If you are located in the EU/EEA, we rely on the following legal bases under Article 6 GDPR: ● Performance of a contract — to process and ship your order. ● Legitimate interests — to secure the Site, prevent fraud, and improve our services, balanced against your rights. ● Consent — for non-essential cookies and marketing emails, which you may withdraw at any time. ● Legal obligation — where processing is required to comply with applicable law. 5. Sharing Your Personal Information We share Personal Information with the following categories of recipients: ● Squarespace, Inc. — our website hosting and e-commerce platform provider, which processes Site data (including cookies) on our behalf as a data processor. See Squarespace's own Privacy Policy at squarespace.com/privacy. ● Google Analytics — to analyze how visitors interact with the Site. Learn more at the Google Privacy Policy, or opt out using the Google Analytics Opt-out Browser Add-on. ● Payment processors — to securely process transactions; we do not store full payment card details ourselves. ● Legal and regulatory authorities — where required to comply with a subpoena, search warrant, court order, or other lawful request, including notifications required under the PDPO's mandatory data breach reporting regime. We do not sell your Personal Information for monetary consideration. We do not knowingly share Personal Information with any party for purposes unrelated to those described in this policy. 6. International Data Transfers Because we are based in Hong Kong, use a US-based hosting provider (Squarespace), and serve customers worldwide, your Personal Information may be transferred to, stored, and processed in jurisdictions other than your own, including Hong Kong and the United States. Hong Kong does not currently hold a European Commission adequacy decision. Where we transfer Personal Information of individuals in the EU/EEA or UK outside those regions, we rely on appropriate safeguards, including Standard Contractual Clauses with our service providers, or your explicit consent where applicable. By using the Site, you understand that your information may be processed outside your country of residence. 7. Cookies and Consent The Site uses cookies through Squarespace's built-in cookie banner and Google Analytics. Visitors from the EU/EEA and UK will be presented with a cookie consent banner before non-essential cookies (such as analytics cookies) are activated; you may accept, decline, or manage your preferences at any time. Essential cookies required for the Site to function are not subject to consent under applicable law. For more detail on the categories of cookies used, see our separate Cookies Policy. 8. Behavioral Advertising We use email marketing and advertising to provide content we believe may be relevant to you. You may opt out of targeted advertising through: ● Facebook Ads: facebook.com/settings/?tab=ads ● Google Ads: google.com/settings/ads/anonymous ● Bing Ads: advertise.bingads.microsoft.com (personalized ads policy) ● The Digital Advertising Alliance opt-out page: optout.aboutads.info 9. Do Not Track The Site does not currently alter its data collection and use practices in response to a “Do Not Track” signal from your browser. 10. Your Rights 10.1 European Economic Area (GDPR) If you are located in the EEA or UK, you have the right to access, correct, update, or delete your Personal Information; the right to data portability; the right to restrict or object to processing; the right to withdraw consent at any time; and the right to lodge a complaint with your local supervisory authority. We will respond to verified requests within one month, as required by Article 12 GDPR. 10.2 Hong Kong (PDPO) If you are located in Hong Kong, you have the right under the Personal Data (Privacy) Ordinance to be informed of the purpose for which your data is used and the classes of persons to whom it may be transferred; to request access to your Personal Information (Data Access Request); and to request correction of inaccurate data (Data Correction Request). We will respond to such requests within 40 days as required by the PDPO. We may charge a reasonable fee for processing a Data Access Request as permitted under the Ordinance. 10.3 Mexico (LFPDPPP) If you reside in Mexico, you have the right to access, rectify, cancel, or oppose the use of your personal data (derechos ARCO) under the LFPDPPP. 10.4 California (CCPA/CPRA) If you are a California resident, you have the right to know what Personal Information we collect, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of Personal Information (we do not sell Personal Information), and to non-discrimination for exercising any of these rights. We will respond to verifiable consumer requests within 45 days. 10.5 Other Jurisdictions If you reside elsewhere and believe a specific privacy law applies to you, please contact us to inquire about your rights. To exercise any of the rights above, contact us at studio@allecpetrescuart.com. We may need to verify your identity before completing your request. 11. Data Retention We retain Order Information and other Personal Information for 24 months from the date of collection, unless a longer retention period is required by law (for example, tax or accounting record-keeping obligations) or you request earlier deletion. Device Information collected via analytics cookies is retained according to the default retention settings of the relevant analytics provider (currently Google Analytics), which you can review in that provider's own documentation. 12. Security Measures We implement physical, electronic, and administrative security measures designed to protect your Personal Information from unauthorized access, alteration, disclosure, or destruction. In the event of a data breach that creates a real risk of harm to affected individuals, we will notify the Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD) and affected individuals as required under the PDPO's data breach notification regime, and any other regulator or individual as required by applicable law. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. 13. Minors The Site is not directed to, and is not intended for use by, individuals under 16 years of age. We do not knowingly collect Personal Information from children. If you believe a child has provided us with Personal Information, please contact us so we can delete it. 14. Changes to This Privacy Policy We may modify this Privacy Policy from time to time to reflect changes in our practices or applicable law. Changes take effect immediately upon posting to the Site. We encourage you to review this page periodically. For material changes affecting how we use previously collected Personal Information, we will provide additional notice where required by law. 15. Contact Us For privacy-related questions or requests, contact: Allec Petrescu Art — Attn: Privacy Compliance Officer Email: studio@allecpetrescuart.com

Shipping Policy for Artwork. Because our artwork is original and/or made to order, the following terms apply to all purchases. Please review carefully before completing your order, as this policy affects your right to return or cancel a purchase, including under consumer protection laws in your jurisdiction (such as the EU's 14-day right of withdrawal for distance sales, which generally does not apply to personalized or custom-made goods). 1. No Returns & No Refunds After Shipment All sales are final once artwork has shipped. We do not accept returns or offer refunds after shipment, except where required by mandatory consumer protection law in your jurisdiction. Please review your order carefully before completing your purchase. 2. Delivery Attempts We will make a maximum of two delivery attempts. If delivery is unsuccessful after these attempts, the package will be returned to our facility, and you will be responsible for the cost of reshipping your order. 3. Damaged Packages If your package arrives damaged, you have 4 days from the delivery date to file a claim. Contact studio@allecpetrescuart.com with your order number and photos of the damage to begin the claims process. If your local consumer protection law provides for a longer claim period, that longer period will apply instead. 4. Delivery Timeframe Please allow 7 to 12 business days for delivery. Delivery times may vary based on your location and other factors beyond our control, including customs processing for international shipments. 5. Customs, Duties, and Import Taxes International orders may be subject to customs duties, import taxes, or fees imposed by the destination country. These charges are the responsibility of the customer and are not included in the purchase price or shipping cost. 6. Final Sale Policy Due to the original or made-to-order nature of our artwork, all purchases are final, with no returns or exchanges except as described in Section 3 above or as required by applicable law. If you have questions before purchasing, please contact us for additional details.

Contact for Shipping Questions

Email: studio@allecpetrescuart.com