Privacy Policy

Last updated: 8 August 2026

This Privacy Policy explains how BeSahu Arts collects, uses, shares and protects personal information when you visit besahuarts.com, contact us, subscribe to emails or purchase from the online store.

1. Who we are

BeSahu Arts is the trading name of Bhawana Sahu, a self-employed sole trader (autónoma) established in Spain. Bhawana Sahu is the data controller for the personal information described in this policy.

Address: Avenida del Ferial, 49600 Benavente, Zamora, Spain
Email: info@besahuarts.com
Website: besahuarts.com

2. When this policy applies

This policy applies when you browse the website, place or attempt to place an order, create or use a customer account, contact us, request customer service, submit a form, join The Collector’s Letter or otherwise interact with BeSahu Arts online.

The website may link to services controlled by other organisations. Their own privacy policies apply when you use those services.

3. Personal information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as name, email address, telephone number, billing address and delivery address.
• Order and transaction information, such as items viewed or purchased, order value, currency, payment status, delivery details, cancellations, returns, refunds and order communications.
• Payment-related information. Payment providers process full payment-card or account details. BeSahu Arts generally receives limited information such as payment status, payment method, billing details and transaction identifiers.
• Account information, if customer accounts or Shop features are used, including account identifiers and saved preferences.
• Communications, including messages sent through forms or email, support requests and our replies.
• Marketing information, including whether you asked to receive The Collector’s Letter or other email marketing, the source and date of consent, confirmation status, email engagement and unsubscribe choices.
• Device and usage information, such as IP address, browser and device type, cookie or similar identifiers, approximate location, pages viewed, referring pages and interactions with the store.
• Security and fraud information, such as risk indicators and authentication information needed to protect the store, payments and customers.

We do not intentionally request special-category personal data. Please do not include sensitive information in free-text messages unless genuinely necessary.

4. How we obtain information

We obtain information directly from you; automatically from your browser or device through cookies and similar technologies; from Shopify and services used to operate the store; from payment, delivery and fraud-prevention providers in connection with a transaction; and from third parties where you direct or authorise them to send information to us.

5. Why we use personal information and our legal bases

• Contract or steps requested before a contract: to provide checkout, process payment, fulfil and deliver orders, send transaction messages, manage cancellations, returns or refunds, and answer enquiries about a possible purchase.
• Legal obligation: to keep tax and accounting records, provide required consumer information, respond to lawful requests from authorities and meet other duties under applicable law.
• Legitimate interests: to operate and secure the website, prevent and investigate fraud or misuse, provide customer service, maintain business records, understand permitted store performance, improve services, and establish, exercise or defend legal claims. We use this basis only where our interests are not overridden by your rights and freedoms.
• Consent: to send The Collector’s Letter and optional marketing, and to use non-essential analytics, personalisation or advertising technologies where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.

Some information is required to enter into or perform a purchase contract. Without required checkout, payment or delivery information, we may be unable to accept or fulfil an order.

6. Email marketing

We send The Collector’s Letter or promotional email only where you requested it or another legal basis expressly permits it. New subscribers are asked to confirm their subscription where double opt-in is configured. You can unsubscribe at any time through the link in a marketing email or by contacting info@besahuarts.com.

Unsubscribing from marketing does not stop necessary messages about an order, account, return, refund, security matter or reply to your request. BeSahu Arts does not currently use SMS marketing.

7. Cookies and similar technologies

The store uses cookies and similar technologies for essential checkout and security functions, preferences, permitted analytics and, where enabled and lawfully consented to, personalisation or advertising.

Where consent is required, non-essential technologies are not used until you make a choice through the cookie banner. You may withdraw or change that choice through Cookie Preferences in the website footer. Essential cookies cannot be disabled through the banner because they are necessary for the store to function. More information is available in the Cookie Policy.

If an app, pixel or tracking tool is added later, we will update the relevant information and require it to respect the applicable consent mechanism before activation.

8. Shopify and Shopify Network Intelligence

The store is hosted by Shopify. Shopify processes personal information when you visit or use the store and when you make a purchase, including to provide hosting, checkout, payments, security, analytics and other commerce services.

Shopify Network Intelligence is currently enabled for this store. Shopify may use information from interactions with BeSahu Arts, other Shopify merchants and Shopify to provide enhanced services such as personalisation, store performance, fraud prevention and advertising features. Information may be shared with Shopify and relevant providers in other countries for these purposes. Other merchants cannot access BeSahu Arts customer data.

Where required, consent is requested before device data is used for non-essential purposes such as personalised advertising. You can change your choice through Cookie Preferences. Learn more in the Shopify Consumer Privacy Policy and manage certain choices through the Shopify Privacy Portal.

9. Who receives personal information

We disclose information only where reasonably necessary to operate the business, fulfil your request or comply with law. Recipients may include:

• Shopify, its affiliates and subprocessors for store hosting, checkout, accounts, forms, email, analytics, security and related commerce services.
• Payment providers and financial institutions, including Shopify Payments and the payment method selected at checkout.
• Postal and courier providers, which receive the contact and delivery information needed to deliver, track or return an order.
• Professional providers, such as our gestor, accountant, legal advisers, insurer, technical support and secure IT providers, where needed and subject to appropriate confidentiality.
• Authorities, courts and regulators where disclosure is required by law or necessary to protect legal rights.
• A buyer or successor if all or part of the business is reorganised, sold or transferred, subject to appropriate safeguards.

We do not sell personal information for money. Certain advertising or enhanced-service disclosures may be treated as a “sale”, “sharing” or “targeted advertising” under some United States state privacy laws. Where applicable, use the Your Privacy Choices link or contact us to opt out.

10. International transfers and hosting

The primary Shopify hosting location selected for the store is the European Union. Shopify and other providers operate internationally, so information may also be processed outside your country, including in Canada and the United States.

Where European or UK information is transferred internationally, recognised safeguards are used as applicable, such as adequacy decisions, approved standard contractual clauses or other lawful transfer mechanisms.

11. How long we keep information

We keep information only for as long as necessary for its purpose and thereafter where required to comply with law, resolve disputes, prevent fraud or establish, exercise or defend legal claims.

• Order, invoice, payment, tax and accounting records are retained for legally required periods, which can generally be up to six years under Spanish commercial-record rules and four years for tax obligations, subject to longer periods where a claim or another rule applies.
• Customer-service and order communications are retained as reasonably needed to manage the transaction and related claims.
• Marketing information is retained until you unsubscribe or withdraw consent, with a limited suppression record kept to respect that choice.
• Cookie and device information is retained according to the duration and purpose of the relevant technology.

Shopify and other providers may retain information under their own legal obligations. When information is no longer required, it is deleted, anonymised or securely isolated until deletion is possible.

12. Your rights in the EEA and United Kingdom

Subject to applicable law and lawful exceptions, you may request access, correction, deletion, restriction or portability of your information; object to processing based on legitimate interests; object at any time to direct marketing; withdraw consent; and lodge a complaint with a data-protection authority.

To exercise a right, email info@besahuarts.com and describe your request. We may request information reasonably necessary to verify identity and protect data. We normally respond within one month, although law may permit an extension for complex or numerous requests.

You may complain to the Spanish Data Protection Agency (AEPD). If you are in the United Kingdom, you may also contact the Information Commissioner’s Office (ICO). You may contact us first if you would like us to try to resolve the concern.

13. United States privacy rights

Depending on your state, legal thresholds and exceptions, you may have rights concerning access, correction, deletion, portability, relevant data categories and recipients, or opting out of data sharing or targeted advertising. Submit a request to info@besahuarts.com. Where displayed, use Your Privacy Choices for relevant opt-outs. We may verify identity and authority before acting.

14. Security

We use reasonable administrative, technical and organisational measures designed to protect information. No online system is completely secure, so absolute security cannot be guaranteed. Contact us promptly if you believe information connected with BeSahu Arts has been compromised.

15. Children

The store is intended for adults and is not directed to children. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information so that we can investigate.

16. Automated processing

Shopify, payment providers and fraud-prevention services may use automated systems to assess payment or fraud risk. BeSahu Arts does not intend to make decisions producing legal or similarly significant effects solely through automated processing. We may review, decline or cancel an order where reasonably necessary for security, fraud prevention, legal compliance or payment reasons.

17. Changes to this policy

We may update this policy when services, providers, legal obligations or data practices change. The revised version will be posted here with an updated date. Additional notice or renewed consent will be provided where required.

18. Contact

Bhawana Sahu, trading as BeSahu Arts
Avenida del Ferial 
49600 Benavente, Zamora, Spain
Email: info@besahuarts.com