Privacy Policy
Effective date: 4 November 2026
Who is responsible for your data
The controller of personal data processed through decoimage.org is Federico Foschi.
Address: Calle Batalla de los Potros, 22, 11405 Jerez de la Frontera, Spain
Privacy contact: info@decoimage-store.com
When this policy applies
This policy covers personal data processed when you browse decoimage.org, contact us, request a quotation, submit a Ready to Install Vinyls B2B order request, or communicate with us about an order, delivery, invoice or complaint. The Vinyls form collects a request only: it does not take payment or confirm an order.
Data we process
Depending on how you interact with us, we may process:
Details you provide, including your name, company, role, contact details, country, business or delivery address and message.
Vinyls request details, including the selected design, size, quantity, company details, VAT ID, notes and indicative subtotal.
Correspondence and, where an order is accepted, order, delivery, invoice and payment records.
Technical or usage information generated when the website is accessed, including information handled through cookies or similar technologies.
Please do not submit sensitive personal data unless it is necessary for your enquiry.
Purposes and legal bases
We use enquiry and order-request details to respond, check business and delivery information, prepare a quotation and take steps requested before a contract. If an order is accepted, we use relevant data to perform it. We process invoice and accounting records to meet legal obligations.
We may use business contact details to manage business enquiries and relationships, protect the website and handle claims, where this is in our legitimate interests. Any optional marketing is separate from an order request and is handled on an applicable legal basis. Submitting a request is not marketing consent.
The form requires certain design, size, quantity, company, VAT and contact fields so that we can review and respond. If required details are missing, we may be unable to process the request. The displayed subtotal is indicative; we confirm the final amount separately.
Who may receive your data
Depending on the service used and the request, data may be processed by Squarespace (website and store platform), Jotform (B2B request form) and Weglot (website translation). Certain product pages display payment-option information through Stripe, including Klarna instalment information. If you place an order, the payment provider selected at checkout may process the information needed to handle the payment. For an accepted order, relevant details may also be shared with the selected print and delivery provider. Professional advisers and public authorities may receive data where needed for legal, tax, accounting or dispute matters.
International transfers
Jotform stores Ready to Install B2B request submissions in the United States under a signed Data Processing Agreement. The agreement provides for the European Commission’s Standard Contractual Clauses (SCCs) where applicable and permits reliance on the EU–U.S. Data Privacy Framework only where the recipient is actively certified for the relevant data and all applicable requirements are met. The agreement also recognises that additional requirements may apply to a particular transfer.
Squarespace’s Data Processing Addendum forms part of its terms and describes transfer mechanisms, including SCCs and the EU–U.S. Data Privacy Framework where applicable. Weglot states that its servers are located in the European Union and that it may use subprocessors outside the EEA, including in the United States, with SCCs or the EU–U.S. Data Privacy Framework where applicable. Stripe-hosted payment-option information, including Klarna instalment information, is displayed on certain product pages. If you use a payment provider at checkout, that provider may process data in accordance with its own terms and privacy information. Contact us using the details above for further information about the providers used for a specific request or order.
How long we keep data
Jotform submissions that do not result in an order are reviewed manually after six months of inactivity. We delete a submission when it is no longer needed for operational purposes, handling a complaint or claim, or meeting a legal obligation. Automatic deletion in Jotform is currently disabled. This review concerns the submission held in Jotform and does not determine how long separate business or tax records are kept.
For accepted orders, commercial, invoice and accounting documents are retained for the periods required by applicable law and for as long as needed to manage the order or related claims. Technical, cookie and preference data are retained according to the relevant service settings and applicable requirements.
Your rights
Subject to applicable law, you may request access to, correction or deletion of your personal data, restriction of processing and, where available, portability. You may object to processing based on legitimate interests and withdraw consent where processing is based on consent. Withdrawal does not affect processing carried out before it.
To exercise your rights, contact info@decoimage-store.com. You may also complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
Cookies and website preferences
The website provides a cookie preference tool. Cookies and similar technologies may process technical or usage information. You can use the on-site controls to review or change your preferences.
Automated decisions
The Vinyls form calculates an indicative subtotal. A person reviews each request and confirms the final amount; the form does not automatically accept or reject an order.
Links and updates
Third-party websites linked from decoimage.org have their own privacy notices. We may update this policy; the current version will be available on this page.