Privacy Policy & Personal Data Processing

Effective July 6, 2026

1. Data controller

The controller of your personal data is gozpz(the “Artist”), based in Bogotá D.C., Colombia. For anything related to your data, write to contact@gozpz.com.

2. Data we collect

We only collect data you give us: (a) when subscribing to the newsletter: email address, language preference and, optionally, phone number; (b) when purchasing from the store (once available): name, identification where legally required, shipping address, phone and transaction details. Payments are processed by authorized payment gateways — we never store card numbers.

3. Purposes

We use your data to: send your welcome gift and the newsletter featuring new artwork, drops, exhibitions and courses; process and ship your orders; issue invoices; answer your requests; and comply with legal obligations. We do not sell or rent your data to third parties.

4. Legal basis

We process your data based on: (a) your prior, express and informed consent, given when you check the subscription box (Colombian Law 1581 of 2012 and Decree 1377 of 2013); (b) performance of a contract when you make a purchase; and (c) compliance with legal, accounting and tax obligations.

5. Your rights — Colombia (Law 1581 of 2012)

As data subject you may: know, update and rectify your data; request proof of your authorization; be informed about how your data is used; revoke your authorization and/or request deletion where no legal or contractual duty prevents it; and file complaints before the Colombian Superintendence of Industry and Commerce (SIC). To exercise these rights, write to contact@gozpz.com; we answer inquiries within 10 business days and claims within 15 business days, as required by law.

6. Users in the United States

If you visit or purchase from the United States: (a) every commercial email includes an unsubscribe mechanism and we honor opt-out requests under the CAN-SPAM Act; (b) if you reside in California or another state with an active privacy law (CCPA/CPRA and equivalents), you have the right to know, access, correct and delete your personal information, and not to be discriminated against for exercising those rights. We do not sell or share your personal information as defined by those laws. Exercise your rights by writing to contact@gozpz.com.

7. European Union and other countries

If you are in the European Union or the European Economic Area, we process your data in line with GDPR principles on the basis of your consent (art. 6(1)(a)) or the performance of a contract (art. 6(1)(b)), and you may exercise your rights of access, rectification, erasure, restriction, portability and objection. For any other country, we apply the principles of this policy and the protections of Colombian law as a minimum standard, and we honor the rights granted to you by applicable local law. All rights are exercised through contact@gozpz.com.

8. International transfers

Our servers are hosted in Europe and our email service operates from the United States. By accepting this policy you authorize the international transfer of your data to these providers, which act as processors under adequate protection standards.

9. Processors and providers

We share data only with providers required to operate: hosting in Europe, transactional email, payment gateways authorized in Colombia (for purchases) and shipping carriers (for physical orders). Each provider accesses only the data strictly necessary for its role.

10. Security

We apply reasonable technical and organizational measures: encryption in transit (TLS), restricted database access, strong passwords and backups. No system is infallible, but we treat your data with the same care as the Artist’s work.

11. Retention

We keep your data while your subscription or a commercial relationship remains active, and afterwards only for as long as legal, accounting or tax rules require. If you revoke your authorization, we remove your data from our contact lists immediately.

12. Cookies

This site uses only strictly necessary technical cookies (for example, the admin panel session). We use no advertising or third-party tracking cookies. If that changes, we will update this policy and let you know.

13. Minors

Our services are intended for people over 14. We do not knowingly collect data from children; if you believe a minor gave us their data, write to us and we will delete it.

14. Changes to this policy

We may update this policy when our operations or the law change. The current version and its date will always be published on this page, and material changes will be notified to your registered email.

15. Contact

Single channel for privacy and personal data: contact@gozpz.com. You may also unsubscribe from the newsletter by replying to any email with the word STOP.