Privacy policy
Last updated: August 15, 2026
ETHOSALIS operates this store and website, including its related content, features, products and services, to provide visitors and customers with a curated gallery and shopping experience (the “Services”). Our store is hosted and powered by Shopify.
The legal operator of ETHOSALIS is identified in the Legal Notice available on this website. That operator is the data user or controller responsible for personal information processed through the Services, except where Shopify or another service provider acts independently as a controller under applicable law.
This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal information when you visit or use the Services, inquire about an artwork, arrange a private viewing, make a purchase or other transaction, or communicate with us.
Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.
PERSONAL INFORMATION WE COLLECT
“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised or de-identified so that it can no longer reasonably identify you.
Depending on how you interact with the Services, we may collect or process the following categories of personal information:
• Contact information, including your name, email address, telephone number, billing address and shipping address.
• Inquiry information, including the artwork you are interested in, private-viewing requests, condition-report requests, shipping questions, acquisition preferences and other information included in your communications with us.
• Order and transaction information, including artworks or other items viewed or purchased, order history, transaction value, payment status, delivery details, returns, cancellations and related correspondence.
• Payment-related information. Payment information is collected and processed primarily by Shopify and authorised payment providers. We may receive billing details, payment status, payment method type and limited transaction identifiers, but we generally do not receive or retain complete payment-card numbers.
• Account information, if customer accounts are available and you choose to create one, including login credentials, preferences and account settings.
• Device and technical information, including your device type, browser, network connection, IP address and other online identifiers.
• Usage information, including how you access, navigate and interact with the Services, the pages and artworks you view, and the time and manner of your interactions.
• Marketing preferences, including whether you have chosen to receive or decline marketing communications.
Providing personal information is generally voluntary. However, certain information is required to process payments, fulfil and deliver orders, respond to inquiries, arrange requested services or comply with legal obligations. If you do not provide information identified as required, we may be unable to provide the relevant Services.
SOURCES OF PERSONAL INFORMATION
We may collect personal information:
• Directly from you when you visit or use the Services, submit an inquiry, create an account, request information, make a purchase, communicate with us or otherwise provide information to us.
• Automatically through cookies and similar technologies when you access or use the Services.
• From Shopify, payment providers, delivery providers and other service providers that support the operation of the Services.
• From marketing, analytics, referral or other business partners, where permitted by applicable law.
HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes:
Providing the Services
We use personal information to respond to artwork inquiries, provide condition or availability information, arrange private viewings, process payments and acquisitions, fulfil and deliver orders, administer customer accounts, manage cancellations or returns, and provide customer care.
Communicating with You
We use personal information to respond to inquiries, provide order and delivery updates, communicate about existing acquisitions, and maintain our relationship with you.
Personalising and Improving the Services
We may use information about how visitors interact with the Services to understand interest in artworks and artists, improve website functionality, remember preferences and provide a more relevant browsing experience.
Security and Fraud Prevention
We use personal information to authenticate accounts, protect transactions, identify and investigate suspected fraudulent, illegal, unsafe or malicious activity, protect our visitors and customers, and maintain the security of the Services.
Marketing and Advertising
Where permitted by law, we may use personal information to provide marketing or promotional communications and to measure or improve the relevance of our communications and advertising.
Where consent is required, we will use personal information for these purposes only after receiving the required consent. You may withdraw your consent or unsubscribe from promotional emails at any time.
Legal and Compliance Purposes
We may use personal information to comply with applicable laws, tax and accounting requirements, lawful government requests, court orders or other valid legal processes; to establish, exercise or defend legal claims; and to enforce our terms and policies.
COOKIES AND SIMILAR TECHNOLOGIES
The Services use cookies and similar technologies to operate the website, remember preferences, maintain security, understand website usage, perform analytics and, where permitted, support advertising or personalisation.
Some cookies are necessary for the Services to function. Other cookies may be used only after you provide consent where applicable law requires it.
Where a cookie banner is displayed, you may accept, decline or manage non-essential cookies using the options provided. You may also adjust your browser settings, although blocking necessary cookies may affect the operation of certain features.
HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy, including:
• To Shopify, which hosts and supports the Services.
• To authorised payment processors and financial service providers that process payments and help prevent fraud.
• To shipping, logistics, fulfilment, insurance and customs-service providers where necessary to deliver an acquisition.
• To technology, website hosting, cloud storage, security, customer-service and professional service providers acting on our behalf.
• To analytics, advertising or marketing providers, subject to applicable consent and opt-out requirements.
• When you direct us or consent to a particular disclosure.
• Where required to comply with applicable law, lawful legal process or requests from competent authorities.
• Where necessary to protect the Services, our rights, property or safety, or the rights, property or safety of customers or others.
• In connection with a proposed or completed business transaction, restructuring, merger, acquisition, financing, insolvency or transfer of assets, subject to appropriate confidentiality and legal safeguards.
We do not sell personal information for monetary payment. Certain uses of analytics, advertising or personalisation services may nevertheless be treated as a “sale,” “sharing” or “targeted advertising” under some privacy laws.
Where applicable, you may opt out through our data-sharing opt-out page:
https://ethosalis.art/pages/data-sharing-opt-out
RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify. Shopify collects and processes personal information relating to your access to and use of the Services so that it can provide, protect and improve the Shopify platform and related services.
Information submitted through the Services may be transmitted to and processed by Shopify and other service providers in countries outside your place of residence.
Shopify Network Intelligence is currently enabled for our store. This means Shopify may use information relating to interactions with our store, other merchants and Shopify to provide enhanced services, including security, analytics, personalisation and advertising-related functionality.
For certain enhanced services, Shopify may act independently as the controller responsible for its processing of personal information and for responding to requests relating to that processing.
You can learn more through the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
You may exercise rights relating to information processed independently by Shopify through the Shopify Privacy Portal:
https://privacy.shopify.com/en
TARGETED ADVERTISING AND DATA-SHARING CHOICES
Depending on where you live, you may have the right to opt out of the sale or sharing of personal information or the processing of personal information for targeted advertising.
You may submit an applicable opt-out request at:
https://ethosalis.art/pages/data-sharing-opt-out
Where legally required, we also recognise Global Privacy Control signals. If you access the Services with a supported Global Privacy Control signal enabled, we will treat it as an opt-out request for the relevant browser or device where required by applicable law.
More information about Global Privacy Control is available at:
https://globalprivacycontrol.org/
Other than legally recognised preference signals, we do not currently respond to general “Do Not Track” browser signals.
THIRD-PARTY WEBSITES AND SERVICES
The Services may contain links to websites or online services operated by third parties. We are not responsible for the privacy, security, accuracy or practices of third-party websites or services.
When you follow a third-party link, you should review the privacy policy and terms applicable to that third party. The inclusion of a link does not necessarily mean that we endorse the third party or its content.
INTERNATIONAL TRANSFERS
Personal information may be transferred to, stored in or processed in jurisdictions outside your place of residence, including Hong Kong, the United States and other locations where Shopify and our service providers operate.
These jurisdictions may have data-protection laws that differ from those in your place of residence.
Where personal information is transferred from the European Economic Area or the United Kingdom, we will rely on an applicable lawful transfer mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the United Kingdom’s approved transfer arrangements, or another mechanism permitted by applicable law.
DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The applicable retention period depends on factors including whether the information is required to maintain an account, respond to an inquiry, complete and document an acquisition, provide customer care, meet tax or accounting requirements, resolve a dispute, enforce an agreement, prevent fraud or comply with legal obligations.
When personal information is no longer required, we will delete, anonymise or otherwise dispose of it in accordance with applicable law and our operational requirements.
SECURITY
We use reasonable administrative, technical and organisational measures designed to protect personal information against unauthorised or accidental access, disclosure, alteration, loss, misuse or destruction.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send confidential payment information, complete payment-card details, passwords or other highly sensitive information through email, website inquiry forms or social-media messages.
If you create a customer account, you are responsible for maintaining the confidentiality of your account credentials and should not share them with anyone else.
CHILDREN’S PERSONAL INFORMATION
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority applicable in their jurisdiction.
If you are a parent or guardian and believe that a child has provided personal information to us, please contact the ETHOSALIS Privacy Contact so that we can review and, where appropriate, delete the information.
We do not knowingly sell or share, as those terms may be defined under applicable privacy laws, personal information belonging to individuals under 16 years of age.
YOUR RIGHTS AND CHOICES
Depending on where you live and subject to applicable legal conditions and exceptions, you may have some or all of the following rights:
• The right to ask whether we hold personal information about you.
• The right to request access to personal information we hold about you.
• The right to request correction of inaccurate or incomplete personal information.
• The right to request deletion of personal information.
• The right to receive certain personal information in a portable format.
• The right to request restriction of, or object to, certain processing.
• The right to withdraw consent where processing is based on consent.
• The right to opt out of certain data sharing, sales or targeted advertising.
• The right to lodge a complaint with an applicable data-protection authority.
These rights are not absolute and may apply only in certain circumstances. We may decline or limit a request where permitted or required by law.
You may exercise applicable rights by contacting the ETHOSALIS Privacy Contact using the details below. We may need to verify your identity before processing a request. Where permitted by law, an authorised agent may submit a request on your behalf, subject to verification of the agent’s authority.
We will not unlawfully discriminate against you for exercising an applicable privacy right and will respond within the period required by applicable law.
MARKETING COMMUNICATIONS
You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the communication or by contacting us.
If you unsubscribe from marketing communications, we may still send non-promotional communications necessary to respond to inquiries, administer your account, process an acquisition, provide order or delivery information, or meet legal obligations.
COMPLAINTS
If you have a concern about how we process personal information, please contact the ETHOSALIS Privacy Contact so that we can review and respond to your concern.
Depending on where you live, you may also have the right to lodge a complaint with your local data-protection authority.
In Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data:
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices or legal obligations.
When we update this Privacy Policy, we will publish the revised version on this website, update the “Last updated” date and provide any additional notice required by applicable law.
CONTACT
Privacy requests are handled by the ETHOSALIS Privacy Contact.
Should you have any questions about our privacy practices or this Privacy Policy, or wish to exercise any of your privacy rights, please email us at inquiry@ethosalis.art or write to us at:
ETHOSALIS Privacy Contact
287–299 Queen’s Road Central
Sheung Wan
Hong Kong SAR
Please do not send confidential payment information through email, website forms or social-media messages.