Privacy policy
Last updated: [20 08 2025]
This Privacy Policy explains how ROOF OF ART (ROA) (“ROA”, “we”, “us”, “our”) collects, uses, discloses, and protects your information when you visit roa.studio, make a purchase, contact us, or participate in our workshops and events. By using our site or services, you agree to this Policy.
Controller: ROOF OF ART (ROA), [شركة روف اوف آرت لترويج المنتجات]
Address:Al Sahab Tower, Mohammad Thunayyan Al-Ghanem St, Kuwait City
Contact: team@roa.studio
1) Information we collect
We collect information in three ways: directly from you, automatically from your device, and from partners.
A. You provide to us (examples):
-
Identity & contact: name, email, phone, billing/shipping address.
-
Order details: items purchased, price, payment method (tokenized by our provider), delivery preferences.
-
Communications: messages, support requests, workshop registrations, survey responses.
-
Artwork/commission briefs: references, preferences, installation details.
B. Collected automatically:
-
Device & usage: IP address, browser type, pages viewed, time on site, referring URLs.
-
Cookies & similar tech: to operate the cart/checkout, remember preferences, analytics, and (if you consent) marketing. See Section 7.
C. From third parties (where lawful):
-
Payment processors (payment status, anti-fraud signals).
-
Shipping partners (tracking updates, delivery status).
-
Analytics/advertising partners (aggregate performance data, campaign attribution).
We do not collect or store full card numbers on our servers; payments are processed by our payment provider(s).
2) How we use your information
We use your information to:
-
Fulfill purchases & services: process orders, deliver artworks, provide certificates of authenticity, and arrange workshops.
-
Customer support: respond to questions, handle returns, repairs, or claims.
-
Improve our site & offerings: fix bugs, analyze performance, curate collections, and plan stock.
-
Legal & security: prevent fraud, comply with accounting/tax laws, and enforce our Terms (/terms).
-
Marketing (opt-in): send news, drops, and offers if you subscribe; you can unsubscribe anytime.
Legal bases (for EEA/UK visitors): contract (order fulfillment), legitimate interests (site security, service improvement), consent (email marketing/cookies), legal obligation (tax/accounting).
3) How we share information
We share data only as needed to operate ROA:
-
E-commerce platform & hosting providers (store operation, checkout, security).
-
Payment processors (process payments, prevent fraud).
-
Shipping & logistics providers (delivery, tracking, customs documents).
-
Professional service providers (IT, analytics, email platforms, marketing—where you’ve consented).
-
Authorities or legal recipients (if required by law or to protect our rights).
We do not sell your personal information.
4) International transfers
We are based in Kuwait and work with partners that may process data in other countries. Where required, we rely on appropriate safeguards (e.g., contractual clauses) and trusted vendors that implement industry-standard security.
5) Retention
We keep personal data only as long as necessary for the purposes described here—typically:
-
Orders & invoices: retained to meet legal/accounting obligations.
-
Support messages: retained to manage your requests and improve service.
-
Marketing data: retained until you unsubscribe or your consent is withdrawn.
When no longer needed, we delete or anonymize data.
6) Your choices & rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, and to withdraw consent (for example, email marketing or non-essential cookies).
-
To exercise these rights, contact team@roa.studio.
-
To unsubscribe from marketing emails, use the Unsubscribe link in our emails or contact us.
-
If we cannot resolve a concern, you may have the right to contact your local data protection authority.
We may ask for information to verify your identity before fulfilling a rights request.
7) Cookies & similar technologies
We use cookies and similar technologies to:
-
Essential: site operation, cart, checkout, login/session security.
-
Preferences: remember your language and settings.
-
Analytics: understand site performance and improve features.
-
Marketing (optional/consent-based): measure campaigns, show relevant content.
You can manage cookies via your browser settings. Blocking some cookies may impact certain features (e.g., checkout).
8) Children
Our site is not directed to children under 16. If you believe a child provided us personal data without consent, contact privacy@roa.studio and we will delete it.
9) Security
We use reasonable technical and organizational measures to protect your data (encryption in transit via HTTPS/SSL, access controls, and vetted service providers). No method of transmission or storage is 100% secure; please use strong passwords and keep them confidential.
10) Third-party links & social media
Our site may contain links to third-party sites or social platforms. Their privacy practices are separate from ROA’s. Review their policies before sharing data.
11) Workshops & events
For workshop registrations, we may collect participant names, contact details, emergency contact (optional), and any relevant accessibility notes you provide. Cancellation/rescheduling terms are in Returns & Refunds (/returns).
12) Changes to this Policy
We may update this Policy from time to time. The “Last updated” date shows the latest version. Material changes will be highlighted on this page. Your continued use of the site after changes means you accept the updated Policy.
13) Contact us
Questions about this Policy or your personal data?
team@roa.studio | Address: [Al Sahab Tower, 7th Floor, Mohammad Thunayyan Al-Ghanem St, Kuwait City]