Privacy Policy

TenCate Art, Nederland. Contact: info@tencateart.com.

Contact details you provide via the contact form or email (name, email, message, any attached photographs).

Order details on purchase: billing and shipping address, payment information (processed by Stripe — we do not receive your full card number).

Technical data: anonymous page views (path, language, referrer). No IP address is stored and no tracking cookies are used.

Answering enquiries and performing a contract (Art. 6(1)(b) GDPR).

Compliance with statutory obligations such as accounting retention (Art. 6(1)(c) GDPR).

For art dealers with transactions of €10,000 or more: identification duties under the Dutch Anti-Money-Laundering Act (Wwft).

Improvement of the website based on anonymised statistics (legitimate interest, Art. 6(1)(f) GDPR).

Stripe Payments Europe Ltd. — payment processing.

Supabase (via Lovable Cloud) — secure storage of user accounts and site statistics.

Shipping carriers (DHL, FedEx or similar) — for shipping only.

Data processing agreements are in place with these parties. We do not sell or share your data for marketing.

Stripe and Supabase may process data outside the European Economic Area under EU Standard Contractual Clauses and appropriate safeguards.

Contact and correspondence: up to 2 years after last contact.

Invoicing and accounting: 7 years (tax retention obligation).

Anonymous statistics: up to 24 months.

You have the right of access, rectification, erasure, restriction, portability and objection. Email info@tencateart.com and we will respond within 30 days.

Complaints can be filed with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

We apply appropriate technical and organisational measures: TLS encryption, access control, encrypted storage with Stripe and Supabase.