Last updated: March 2026
Espitia Fine Art (hereinafter “we,” “our,” or “the Gallery”), operated by Rafael Espitia Perea with principal place of business in Bogotá, Colombia, is committed to protecting the privacy and personal information of our customers and website visitors. This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit or make a purchase from espitiafineart.com (the “Site”). This policy applies to all visitors and customers worldwide, including those in the United States and Colombia.
1. Data Controller
Espitia Fine Art Owner: Rafael Espitia Perea Address: Cra. 85f #55-35, Bogotá, Colombia Email: in**@************rt.com WhatsApp: +1 (253) 316-9529
2. Personal Information We Collect
2.1 Information you provide directly
When you make a purchase, fill out a contact form, sign up for a class, or communicate with us, we may collect: your full name, email address, phone number or WhatsApp, shipping and billing address, city, state, and country of residence, and payment information (processed securely by our payment provider Wompi; we do not store credit card data on our servers).
2.2 Information collected automatically
When you browse our Site, we may automatically collect: your IP address, browser type and device information, pages visited and time spent on the Site, referring source (for example, Instagram, Google, or direct), and data from cookies and similar technologies.
3. How We Use Your Information
We use the personal information we collect for the following purposes: processing and fulfilling your purchases of original artwork through our online store; coordinating the shipping of artwork to the United States, Colombia, and other destinations; managing registrations for classes, workshops, and courses; responding to your inquiries sent through our contact form, email, or WhatsApp; sending information about new artwork, auctions, classes, and events, only with your consent; improving our Site and user experience through analytics; and complying with applicable legal and tax obligations.
4. Legal Basis for Processing
We process your personal information based on: your explicit consent when you provide your data to us; the performance of a contract when you purchase artwork or enroll in a class; compliance with legal obligations (tax, commercial); and our legitimate interest in improving our services and communicating with our customers and students.
5. Sharing of Information with Third Parties
We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share your information only with: payment processing providers (Wompi) to securely process transactions; shipping and logistics companies to deliver purchased artwork; technology service providers that assist us in operating the Site (hosting, analytics); and competent authorities when required by law.
All third-party providers are contractually required to protect your data and use it only for the purposes for which it was shared.
6. International Data Transfers
As we serve customers in the United States, Colombia, and worldwide, your personal information may be transferred to and stored on servers located outside your country of residence, including in Colombia and the United States. By using our Site and providing your information, you consent to these transfers. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
H7. Cookies
Our Site uses cookies to improve your browsing experience. Cookies are small text files stored on your device.
We use the following types of cookies: essential cookies, which are necessary for the Site to function properly and for the purchase process (cart, session); analytics cookies, to understand how visitors use our Site through Google Analytics; and preference cookies, to remember your selected language and currency.
You can configure your browser to reject cookies or to notify you when a cookie is sent. However, some features of the Site (such as the shopping cart and language selector) may not function properly without cookies.
8. Your Privacy Rights
We respect your right to control your personal data. Depending on your location, you may have the following rights:
8.1 For all customers worldwide
You have the right to: access the personal information we hold about you; request correction of inaccurate or incomplete information; request deletion of your personal information, subject to legal or contractual obligations; withdraw consent for marketing communications at any time; and request information about how your data has been used.
8.2 For customers in the United States
If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA), including: the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; the right to opt out of the sale of your personal information (we do not sell personal information); and the right to non-discrimination for exercising your privacy rights.
If you are a resident of other U.S. states with privacy legislation (such as Virginia, Colorado, Connecticut, or Utah), you may have similar rights under your state’s applicable law.
8.3 For customers in Colombia
In accordance with Colombian Law 1581 of 2012, you have the right to: know, update, and rectify your personal data; request proof of the authorization granted for the processing of your data; revoke authorization and request the deletion of your data when there is no legal or contractual obligation preventing it; and file complaints with the Superintendencia de Industria y Comercio for violations of data protection law.
8.4 How to exercise your rights
To exercise any of these rights, send an email to in**@************rt.com with the subject line “Privacy Rights Request.” We will respond to your request within fifteen (15) business days.
9. Data Security
We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. Our Site uses an SSL certificate to encrypt information transmitted between your browser and our server. Payment data is processed by certified providers and is not stored on our servers.
10. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, to comply with legal and tax obligations, or while an active business relationship exists with you. Once the data is no longer necessary, it will be securely deleted.
11. Children’s Privacy
Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that a child has provided us with personal information, please contact us so we can delete it.
12. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with the date of the last update. We encourage you to review this page periodically. Your continued use of the Site after the posting of changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, you may contact us at:
Email: in**@************rt.com WhatsApp: +1 (253) 316-9529 Address: Cra. 85f #55-35, Bogotá, Colombia