Privacy notice.

Chaz Art & Co. runs The Walls and is responsible for your personal data (the controller, or in Mexico the responsable). Write to us at thewallsdotart@gmail.com.

Buyers: your name, email, shipping address and phone number (the carrier needs it), your orders, and how you paid. For crypto we keep the wallet address and transaction that paid; for cards, Stripe tells us the payment went through, and we never see your card number. If you make an account we keep your sign-in details and your choices, such as whether you want emails about new work, and your saved works and wishlist. Before buying opens, if you ask us to email you the day it does, we keep only that email address.

Artists we represent: your name, contact details, the agreements you sign, your payout details and what we owe you. You sign in with SolPersona, and we read your public profile and the work you choose to share from it.

Open Walls sellers: the same, plus your legal name, address, country, phone, and for businesses the business name and tax number. We keep these privately so we can answer courts and authorities and pass on legal notices.

People who send a notice: your name, organization, email, any alternate email, phone, postal address, country, the work you say is affected, your explanation, the statements you agree to and your signature.

People who send a counter-notice or an appeal: your name, email, alternate email, phone, address, country, your explanation and any document you attach, the statements and your signature.

Visitors: the basic logs every web server keeps, such as IP address and browser, for security. We count views of Open Walls works, but the counts carry no personal data. When you follow one of our own campaign links (thewalls.art/c/...), we count the click with the kind of device, the app it opened in and the site you came from, plus a code that tells one visitor from another that day and is made with a key we delete when the day ends, so it can never be traced back to you. We keep no IP address with it and put nothing on your device.

People who send us a wall (Wall Crimes): the photo you send us on Instagram or X, your handle and account id there, your comment, reply or messages to us about it, and the video we make from it. We do not collect anything else about you from those platforms.

• To take, make, ship and support your order, and to pay artists: because we have a contract with you.
• To handle notices, counter-notices and appeals, to keep records of our moderation decisions, and to keep tax and accounting records: because the law requires it (a legal obligation).
• To keep the store safe, stop fraud and repeat infringement, and improve the site: because we have a legitimate interest in doing so, which we weigh against your rights.
• To send you emails about new work: only if you ask for them, and you can stop them with one click in any email.
• To read, judge and post a wall you send to Wall Crimes: because you asked us to and agreed to our Wall Crimes terms (your consent), which you can withdraw at any time.

• Prodigi, our print partner, and its carriers: your name, address and phone, to print and deliver your order.
• Stripe, if you pay by card. Stripe handles your card details on its own page.
• Our email provider, to send order, account and notice emails.
• SolPersona, which artists use to sign in. We only read from it.
• Our hosting and storage provider, which keeps the site and its files.
• AI moderation and reverse image search providers, which see only the public display image of an Open Walls listing, never print files or buyer data.
• MiniMax, an AI service, which sees a photo you send to Wall Crimes, to check it is a safe photo of a wall and to write its case. It gets the photo only, not your handle or messages.
• Instagram and X, where a Wall Crimes video is posted, credited to your handle.
• Courts, authorities and our professional advisers, when the law requires it or to defend a legal claim.

When you send a notice: we forward it to the person whose work it is about, with your name and your claim, so they can understand it and respond. We share your contact email only where the law requires it so they can send a counter-notice. If your notice is about your likeness, an intimate image or other illegal content, we do not share anything that identifies you.

When you send a counter-notice: we send it in full, including your name, address, phone and email, to the person who sent the notice, as US copyright law (17 U.S.C. 512(g)) and Mexican copyright law require.

We never sell your personal data, and we do not share it for advertising.

Our service providers may process data outside your country, including in the United States. Where data from the EU, the UK or Mexico goes abroad, we rely on adequacy decisions, standard contractual clauses or the other safeguards the law provides, or on the transfer being needed for your contract with us.

• Orders and payment records: as long as tax and accounting law requires, usually 5 to 10 years.
• Notices, counter-notices, appeals and moderation records: at least one year after the matter is closed, so we can answer later questions and follow the law in each country.
• Seller identity details: while you sell with us and for at least one year after.
• Accounts: until you ask us to close yours, apart from what we must keep above.
• An email address left to hear when buying opens: deleted as soon as that one email is sent.
• Server logs: a few weeks.
• Wall Crimes: a photo we cannot use is deleted within 30 days, and at once if it is explicit or unsafe. A posted wall, its photo and its video stay until you ask us to take it down (DM us REMOVE, or use the link on its page); then we delete them from our site and storage and take down our posts.

Depending on where you live, you can ask us to:

• give you a copy of your data (access);
• correct it (rectification);
• delete it (cancellation or erasure), unless we must keep it;
• stop using it for a purpose (opposition or objection), or limit how we use it;
• send it to you or another service in a common format (portability);
• withdraw consent you gave, such as for marketing emails.

In Mexico these are your ARCO rights (access, rectification, cancellation and opposition) under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares. In the EU and the UK they are your rights under the GDPR and UK GDPR. You can also complain to your data protection authority.

Email thewallsdotart@gmail.com from the address we have for you, and say what you would like. We may ask you to confirm who you are. We answer within the time the law sets, usually a month, and it is free.

We use only what the store needs to work: a cookie that keeps you signed in, one that remembers the language you chose for our artist guides, and your cart, which stays in your own browser. We use no tracking or advertising cookies, so there is nothing to accept.

The Walls is not meant for children under 16, and we do not knowingly collect their data.

When you preview a work on a photo of your own wall, the photo stays on your device. It is never uploaded to us.

Wall Match works the same way. Your wall photo, your swipes, your matches and your chats with the art are kept only in your browser, so they are there when you come back, and none of it reaches us. The messages are written by The Walls in advance, not by the artists, and nothing you type is sent anywhere. “Forget my wall” on the Wall Match page clears it all.

Wall Crimes is different: there you choose to send us a photo of your wall on Instagram or X so we can post it. What happens to it is described above and in the Wall Crimes terms.

We will update this notice when what we do changes, and change the date at the top. If a change matters to you, we will tell you before it applies.

Questions about privacy: thewallsdotart@gmail.com. Our other contact points are on contact points.