We believe you should always know what data we hold about you, why we hold it, and how to ask us to delete it. This policy is written in plain English — not legalese. If anything is unclear, email us at privacy@piktor.art and we will explain it.

Section 01

Who we are

Piktor is an art print service operating under the domain piktor.art, as a trading name of a Portuguese company.

Data Controller
Trading namePiktor
Operated byUnforgettable Words, Lda
CountryPortugal (European Union)
Privacy contactprivacy@piktor.art
Supervisory authorityCNPD — Comissão Nacional de Proteção de Dados, Portugal

As a company based in Portugal, we are subject to the General Data Protection Regulation (GDPR).

Section 02

What stage we are at

Piktor is currently pre-launch. We are not yet selling anything or processing any photos or payment information.

The only personal data we are currently collecting is email addresses from people who sign up to our early access waitlist. This policy covers that activity only.

Before we launch the full product — which will involve uploading photos, processing payments, and shipping orders — we will publish an updated privacy policy and notify all waitlist subscribers before it takes effect.

Section 03

What data we collect and why

Early Access Waitlist
Data collectedYour email address
WhyTo notify you when Piktor launches and send a one-time 20% launch discount code
Legal basisConsent — GDPR Article 6(1)(a). You gave us your email address voluntarily by submitting the waitlist form.

We do not collect your name, phone number, address, or any other information at this stage. You can withdraw consent at any time — see Section 07.

Section 04

How long we keep your data

We will keep your email address on the waitlist until whichever of the following happens first:

We do not retain any data beyond its purpose.

Section 05

Who we share your data with

We do not sell, rent, or trade your personal data. Ever.

We use one third-party service to handle waitlist sign-ups:

Formspree — Form Handler
What they doReceive and store your email address when you submit the waitlist form
Data locationUnited States (AWS infrastructure)
Transfer basisStandard Contractual Clauses (SCCs), as approved by the European Commission
SecuritySOC 2 Type 2 certified, AES-256 encryption at rest, TLS 1.2 minimum in transit

No other third parties receive your personal data at this stage. We do not currently use any analytics tools, advertising pixels, or marketing platforms.

Section 06

Cookies and tracking

At the time this policy was written, our landing page does not use any analytics cookies, tracking pixels, or marketing cookies.

When we add analytics or advertising tools before or at launch, we will update this policy and implement a cookie consent banner before those tools are activated. We will not set non-essential cookies without your prior consent.

Section 07

Your rights under GDPR

You have the following rights over your personal data. To exercise any of them, email privacy@piktor.art — we will respond within 30 days at no charge.

Right of access

Ask us to confirm what data we hold about you and receive a copy of it.

Right to rectification

Ask us to correct any inaccurate data we hold.

Right to erasure

Ask us to delete all data we hold about you. We will act within 30 days. Waitlist subscribers can also unsubscribe via any email we send.

Right to restrict processing

Ask us to pause processing your data while a dispute is resolved.

Right to portability

Ask us to provide your data in a common machine-readable format (CSV or JSON) so you can take it elsewhere.

Right to object

Object to us processing your data for direct marketing. We will stop immediately.

Right to withdraw consent

Withdraw your consent at any time. This does not affect the lawfulness of anything we did before withdrawal.

No automated decisions

We do not make any automated decisions about you using your personal data.

Section 08

How to complain

If you believe we have handled your data unlawfully, or are unhappy with our response to a request, you have the right to lodge a complaint with a data protection authority. We would appreciate the chance to address any concern directly first — but that is entirely your choice.

Portugal's Data Protection Authority

CNPD — Comissão Nacional de Proteção de Dados

Rua de São Bento, 148-3°, 1200-821 Lisboa, Portugal

Tel: +351 21 392 84 00

geral@cnpd.pt · www.cnpd.pt

You also have the right to complain to the data protection authority in the EU country where you live or work.

Section 09

Data security

We take reasonable steps to protect your data. At this stage, the only processing happening is Formspree receiving and storing your email address, which they protect with AES-256 encryption at rest and TLS 1.2 minimum in transit.

We do not store a separate copy of your email address on any server we operate directly at this stage.

Section 10

Changes to this policy

This policy will be updated before we launch the full Piktor product, to cover photos, payments, shipping data, and additional third-party processors.

When we make material changes, we will:

Minor changes — such as fixing a typo without changing the substance — may be made without a separate notification.

Section 11

Contact us

Any questions about this policy or how we handle your data:

Email us at privacy@piktor.art

We aim to respond to all privacy enquiries within 5 business days.

This policy covers the pre-launch period only. A comprehensive policy covering photos, payments, and shipping data will be published before the full product launches.