Privacy Policy

Effective September 17, 2026

About this policy

This policy explains how Aldo Castillo Gallery (“the gallery,” “we,” “us”), 634 5th Avenue South, Naples, Florida 34102, handles personal information collected through our websites, our emails, the gallery, art fairs and our other dealings with you. Contact us at art@aldocastillogallery.com with any question about it.

Information we collect

Information you give us

• Contact details: your name, email address, telephone number and postal address.
• Account details: your email address and sign-in activity. We sign you in with a single-use link sent by email, so you do not need a password.
• Purchase details: the artworks you buy or ask about, your offers, invoices, shipping and billing addresses, payment status, and our correspondence about your order.
• Payment details: you enter card and bank details in the secure payment form of our payment processor, Stripe. We receive limited information such as the card brand, the last four digits, the bank name and the payment status, and we do not store full card or bank account numbers.
• Inquiries and requests: the messages and forms you send us, including requests for private viewings.
• Collector preferences: the artworks you save and the artists and interests you share with us.
• Email preferences: whether you have subscribed to gallery correspondence.

Information collected automatically

• Device and usage information: your IP address, browser and device type, the pages you view, the website that referred you, and your approximate location based on your IP address.
• Campaign information: when you arrive through an advertisement, an email or a social media link, we record the campaign details and any advertising click identifier in that link (such as Google’s gclid or Meta’s fbclid), the page where you arrived and the time. We keep these in a cookie for up to 90 days after your last campaign visit and attach them to any inquiry or order you make, so we can understand which introductions lead to collectors.
• Cookies and similar technologies, described below.

Information from others

• Stripe confirms the status of your payments.
• If you email the gallery, your message and our reply are kept with your customer record.
• Art platforms where we list works, such as Artsy, pass us your name, contact details and message when you ask them to contact us.

How we use information

• To sell, invoice, ship and deliver artworks, and to take payments and issue refunds.
• To provide your collector account, your saved artworks and your order pages.
• To answer your inquiries and arrange private viewings.
• To send messages about your orders, account and inquiries.
• To send gallery correspondence, such as exhibition news and invitations, if you have subscribed.
• To understand how our website is used, improve it, and measure and improve our advertising, subject to your choices below.
• To protect our website and customers against spam, fraud and misuse.
• To keep the business, tax and accounting records the law requires, and to enforce our terms.

Cookies, analytics and advertising

We use cookies and similar technologies for these purposes:

• Essential: an account cookie keeps you signed in, and Cloudflare Turnstile helps protect our forms from automated abuse. Your saved selection and recently viewed works are stored in your browser.
• Your privacy choice: a cookie named acg_privacy remembers whether you allowed or opted out of measurement, for up to 13 months.
• Campaign attribution: a cookie named attr_touch holds the campaign information described above.
• Analytics and advertising: Google Analytics 4, with cookies such as _ga lasting up to two years, and the Meta Pixel, with cookies such as _fbp and _fbc lasting up to 90 days, measure visits and the results of our advertising.
• Payments and videos: Stripe sets cookies on our payment pages to prevent fraud, and embedded YouTube or Vimeo videos may set their own cookies when you play them.

Third parties, including Google and Meta, may use cookies, web beacons and similar technologies to collect or receive information from our website and elsewhere on the internet, and use that information to provide measurement services and to target ads. This means these companies may collect information about your online activities over time and across different websites.

We use the Meta Pixel, the Meta Conversions API, Google Analytics 4 and Google Ads conversion tools. When you make an inquiry, place an order, make a payment, create an account, subscribe or book a viewing, our systems send a record of that event to Google and Meta. The record can include the type and value of the event, the pages you viewed, the campaign details described above, your IP address and browser information, and, for matching, your email address and telephone number in hashed form. Google and Meta may use this information to measure and target ads. We do not send these records to Meta or Google Ads for a browser that has opted out, and Google Analytics then receives them without your contact details.

To learn more, see how Google uses information from sites that use its services and the Meta Privacy Policy.

Your choices

• Opt out of measurement: select “Your privacy choices” at the bottom of any page and choose “Opt out of measurement.” We then stop loading Google Analytics and the Meta Pixel in that browser and stop sending your later activity to Meta and Google Ads. Your choice is saved in that browser, so repeat it on each browser and device you use.
• Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as an opt-out for that browser unless you choose otherwise in “Your privacy choices.”
• Do Not Track: there is no common standard for browser “Do Not Track” signals, so our website does not respond to them. We honor Global Privacy Control as described above.
• Advertising settings: you can also use Google’s ad settings, the Google Analytics opt-out add-on, Meta’s ad preferences, the Digital Advertising Alliance and, in Europe, Your Online Choices.
• Cookies: you can block or delete cookies in your browser settings. Blocking essential cookies prevents you from signing in.
• Email: every gallery correspondence email includes an unsubscribe link and our postal address, and you can manage your preferences in your collector account. We act on unsubscribe requests within 10 business days. We will still send you messages about your orders, account and inquiries.

How we share information

We do not sell your personal information for money, and we do not sell sensitive personal information. Some state laws treat the advertising cookies, pixels and conversion tools described above as a “sale” or “sharing” of personal information, or as “targeted advertising.” You can opt out at any time with “Your privacy choices.”

We share personal information only as follows:

• Service providers that work for us: Amazon Web Services (hosting and storage), Stripe (payments and sales tax calculation), Resend (transactional email), Google Workspace (gallery email), Cloudflare (form protection) and Constant Contact (gallery correspondence).
• Shipping: carriers, fine art shippers and customs brokers receive the name, address, telephone number and shipment details needed to deliver your artwork.
• Analytics and advertising: Google and Meta, as described above.
• Artists and their estates: only with your permission, for example to record the ownership history of a work.
• Advisers and authorities: our professional advisers, auditors and insurers, and public authorities when the law requires it or when needed to protect rights, safety or property or to prevent fraud.
• Business changes: a buyer or successor of the gallery’s business, which must continue to protect your information under this policy.

How long we keep information

We keep sales, invoice and payment records for as long as tax, accounting and other laws require, generally seven years after the sale. We keep inquiries and correspondence while we have an active relationship with you and for a reasonable time afterward. Campaign information stays in your browser for up to 90 days and is kept with a related inquiry or order for as long as that record is kept. Google and Meta keep the data they receive under their own retention settings and policies.

How we protect information

We take reasonable measures to protect personal information, including encryption in transit, access controls, restricted staff access and secure hosting. Card and bank details are handled by Stripe, a payment processor certified to the PCI Data Security Standard. No system is perfectly secure. If a security breach affects your personal information, we will notify you as the law requires.

The order, payment and sign-in links in our emails are personal to you. Please do not forward them.

Your rights and requests

You may ask us to tell you what personal information we hold about you, to give you a copy, to correct it, to delete it, or to stop using it for gallery correspondence or measurement. Email art@aldocastillogallery.com or write to us. We verify requests by confirming that you control the email address on your record, and we respond within 45 days. An authorized agent may make a request for you with your signed permission.

We may need to keep some records, such as sales records, for legal reasons, and we will tell you if we cannot delete them. If you disagree with our decision, reply to it and ask us to reconsider; we will respond to your appeal within 45 days. If you remain unsatisfied, you may contact the attorney general of your state. We will not treat you differently for using your privacy rights.

If you are in the European Economic Area or the United Kingdom, we use your information to perform our agreement with you, to meet legal obligations, for our legitimate interest in running the gallery, and for measurement according to your choices. You may also ask us to restrict or stop certain uses, and you may complain to your data protection authority.

Children

Our websites are intended for adults and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

Visitors from outside the United States

The gallery is based in the United States, and we store and process personal information in the United States. If you contact us from another country, your information is transferred to the United States.

Other websites

Our website links to other websites, such as artist websites and social media. Their privacy practices are their own, and we encourage you to read their policies.

Changes to this policy

We will post any change to this policy on this page with a new effective date. If a change materially affects how we use information we already hold, we will tell you by email or on our website before it takes effect.

Contact: art@aldocastillogallery.com, or write to Aldo Castillo Gallery, 634 5th Avenue South, Naples, Florida 34102.