Privacy Policy
Last Updated: July 2026
At Careva, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, create an account, purchase an artwork, subscribe to our newsletter, or otherwise interact with our services.
By using our website, you acknowledge that you have read and understood this Privacy Policy.
Who We Are
Careva is an online gallery dedicated to promoting and selling original artworks by Mexican artists.
For the purposes of applicable data protection legislation, Careva acts as the Data Controller of your personal information.
Business Name:
CarEva Relato
​
Registered Address:
Soestdijkerstraatweg 58, 1213 XD Hilversum, The Netherlands
​
Email: contact@carevarelato.com
​
VAT Number:
NL005437412B59
​
KVK:
42016169
What Information We Collect
Depending on how you interact with Careva, we may collect different categories of personal information.
​
PERSONAL INFORMATION
-
First and last name
-
Email address
-
Telephone number
-
Billing address
-
Shipping address
-
Country of residence
​
ACCOUNT INFORMATION
If you create an account, we may collect:
-
Login credentials
-
Saved addresses
-
Wishlist items
-
Purchase history
TRANSACTION INFORMATION
When you purchase an artwork we may collect:
-
Order number
-
Purchased artwork
-
Purchase date
-
Payment status
-
Shipping information
-
Return requests
-
Customer support communications
Please note that Careva does not store complete payment card information.
Payments are processed securely by third-party payment providers.
TECHNICAL INFORMATION
When you browse our website we may automatically collect:
-
IP address
-
Browser type
-
Operating system
-
Device information
-
Language preferences
-
Time zone
-
Pages visited
-
Time spent on pages
-
Referral source
​
MARKETING INFORMATION
If you choose to receive updates from Careva, we may collect:
-
Newsletter subscriptions
-
Marketing preferences
-
Communication history
You may unsubscribe at any time.
How We Collect Your Information
Information may be collected when you:
-
Visit our website
-
Create an account
-
Purchase an artwork
-
Contact us
-
Subscribe to our newsletter
-
Complete forms
-
Participate in surveys
-
Use cookies and analytics tools
Why We Process Your Personal Data
We use your information to:
PROVIDE OUR SERVICE
-
Process orders
-
Arrange shipping
-
Manage returns
-
Process refunds
-
Authenticate users
​
CUSTOMER SUPPORT
-
Respond to enquiries
-
Resolve issues
-
Provide after-sales support
​
IMPROVE OUR WEBSITE
-
Analyze website performance
-
Improve user experience
-
Understand visitor behavior
​
MARKETING
Where permitted by law or where consent has been given, we may send:
-
Exhibition announcements
-
Artist releases
-
New collections
-
Promotions
-
Newsletters
Customers may withdraw consent at any time.
​
LEGAL COMPLIANCE
We may process personal information where necessary to:
-
Comply with legal obligations
-
Prevent fraud
-
Resolve disputes
-
Enforce our Terms & Conditions
Legal Basis for Processing (GDPR)
Where the General Data Protection Regulation (GDPR) applies, Careva processes personal information under one or more of the following legal bases:
-
Performance of a contract
-
Legal obligation
-
Legitimate interests
-
Consent
Where consent is required, it may be withdrawn at any time.
Sharing Personal Information
Careva only shares personal information where necessary.
We may share information with:
​
PAYMENT PROVIDERS
Stripe
PayPal
SHIPPING PROVIDERS
Shipping companies responsible for delivering artworks.
WEBSITE SERVICE PROVIDERS
Including:
Wix
Website hosting providers
Cloud storage providers
ANALYTICS PROVIDERS
Such as:
Google Analytics
MARKETING PLATFORMS
Email marketing services used to send newsletters and updates.
GOVERNMENT AUTHORITIES
Where required by law.
Careva never sells personal information to third parties.
​
​
International Data Transfers
Some third-party service providers may process personal information outside the European Economic Area (EEA).
Where applicable, Careva ensures that appropriate safeguards are implemented in accordance with GDPR.
Data Retention
We retain personal information only for as long as necessary to:
-
Complete orders
-
Comply with legal obligations
-
Maintain accounting records
-
Resolve disputes
-
Protect legal rights
Retention periods vary depending on the nature of the information and applicable legal requirements.
Your Rights
Depending on your location, you may have the right to:
-
Access your personal information
-
Correct inaccurate information
-
Request deletion of your data
-
Restrict processing
-
Object to processing
-
Request data portability
-
Withdraw consent
-
Lodge a complaint with a supervisory authority
Requests may be submitted to:
Careva will respond within the time limits required by applicable law.
Data Security
Careva takes appropriate technical and organizational measures to protect personal information from:
-
Unauthorized access
-
Loss
-
Misuse
-
Disclosure
-
Alteration
-
Destruction
These measures include secure payment processing, encrypted communications where appropriate, access controls, and secure hosting environments.
While no system can guarantee absolute security, Careva continually seeks to protect customer information using industry-standard practices.
Cookies
Our website uses cookies and similar technologies to improve your browsing experience.
Cookies help us:
-
Remember your preferences
-
Keep the shopping cart functioning
-
Analyze website performance
-
Improve website functionality
-
Measure marketing effectiveness
When visiting our website, you may choose to:
-
Accept all cookies
-
Reject non-essential cookies
-
Customize your cookie preferences
Essential cookies required for website functionality cannot be disabled.
For more information, please see our Cookie Policy.
Third-Party Websites
Our website may contain links to external websites operated by third parties.
Careva is not responsible for the privacy practices or content of those websites.
We encourage users to review the privacy policies of any external websites they visit.
Children's Privacy
Careva does not knowingly collect personal information from children under the age required by applicable law.
If we become aware that personal information has been collected from a child without appropriate consent, we will take reasonable steps to delete such information.
Changes to this Privacy Policy
Careva may update this Privacy Policy from time to time.
Any changes will be published on this page together with the updated revision date.
We encourage visitors to review this page periodically.
Contact
If you have any questions regarding this Privacy Policy or the way your personal information is processed, please contact:
Email: contact@carevarelato.com
Business Address: Soestdijkerstraatweg 58, 1213 XD Hilversum, The Netherlands