PRIVACY POLICY
ROI DE SICILE — RDS GALLERY
Last updated: 29 June 2026
ROI DE SICILE / RDS Gallery (SIRET 840 496 657 00023), operating at www.roidesicile.com and www.rdsgallery.com, is committed to protecting the personal data of its visitors and customers. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.
This policy applies to all personal data collected through our websites and in the context of our commercial activities. It complies with the French Data Protection Act (Loi Informatique et Libertés) and the European General Data Protection Regulation (GDPR — Regulation EU 2016/679).
1. WHO WE ARE
Data controller: Adrian Grinspan, trading as Roi de Sicile / RDS Gallery
Address: 25 rue du Roi de Sicile, 75004 Paris, France
SIRET: 840 496 657 00023
Contact: roidesicilecontact@gmail.com
Websites: www.roidesicile.com — www.rdsgallery.com
2. WHAT DATA WE COLLECT
2.1 Data you provide to us
When you place an order, create an account, contact us or subscribe to our newsletter, we may collect:
Full name
Email address
Postal address (for delivery)
Telephone number
Payment information (processed securely by Stripe — we do not store card details)
Messages and correspondence you send us
2.2 Data collected automatically
When you visit our websites, certain technical data may be collected automatically by Squarespace (our website platform), including:
IP address
Browser type and version
Pages visited and time spent on the site
Referring URL
This data is collected by Squarespace for platform security and performance purposes. We do not use third-party analytics tools such as Google Analytics.
2.3 Cookies
Our websites use cookies — small text files stored on your device — for the following purposes:
Session management: to keep you logged in during your visit
Platform functionality: required for the Squarespace platform to operate correctly
Payment processing: required by Stripe to process transactions securely
We do not use advertising or tracking cookies. You may disable cookies in your browser settings, though doing so may affect the functionality of certain parts of the site.
3. WHY WE COLLECT YOUR DATA
We collect and process personal data for the following purposes:
Order processing and fulfilment
We use your name, address, email and telephone number to process your order, arrange delivery and communicate with you about your purchase. The legal basis is the performance of a contract (Article 6(1)(b) GDPR).
Customer service
We use your contact details to respond to enquiries, handle returns and resolve disputes. The legal basis is our legitimate interest in providing good service (Article 6(1)(f) GDPR).
Newsletter
If you subscribe to our newsletter, we will use your email address to send you information about new arrivals, gallery news and occasional promotions. The legal basis is your consent (Article 6(1)(a) GDPR). You may unsubscribe at any time by clicking the link in any newsletter or by contacting us directly.
Legal obligations
We may process your data where required to comply with French or European law, including tax and accounting obligations. The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).
4. HOW LONG WE KEEP YOUR DATA
We retain personal data for the following periods:
Order and transaction data: 10 years from the date of the transaction, in compliance with French accounting and tax law.
Customer account data: 3 years from your last interaction with us, after which it is deleted or anonymised.
Newsletter subscriptions: until you unsubscribe, after which your email is removed from our mailing list within 30 days.
Correspondence: 3 years from the date of the last exchange.
5. WHO WE SHARE YOUR DATA WITH
We do not sell, rent or trade your personal data. We share it only with the following trusted service providers, strictly for the purposes described above:
Stripe (payment processing) — stripe.com/privacy
Squarespace (website hosting and e-commerce platform) — squarespace.com/privacy
Colissimo, UPS, DHL, Chronopost (delivery carriers) — your name and address are shared with the relevant carrier to fulfil your order
Specialist art handlers or independent carriers — where applicable for large or fragile items
All service providers are contractually required to process your data only for the purposes we specify and in compliance with applicable data protection law. Where data is transferred outside the European Economic Area (for example, by US-based providers), appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
6. YOUR RIGHTS
Under the GDPR and the French Data Protection Act, you have the following rights in relation to your personal data:
Right of access: you may request a copy of the personal data we hold about you.
Right of rectification: you may ask us to correct inaccurate or incomplete data.
Right of erasure: you may ask us to delete your data, subject to our legal retention obligations.
Right to restriction: you may ask us to limit how we use your data in certain circumstances.
Right to portability: you may request your data in a structured, machine-readable format.
Right to object: you may object to processing based on legitimate interests, including for direct marketing purposes.
Right to withdraw consent: where processing is based on consent (e.g. newsletter), you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at roidesicilecontact@gmail.com with a clear description of your request and a copy of a valid identity document. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.
7. DATA SECURITY
We take the security of your personal data seriously. Our website is hosted on Squarespace, which maintains industry-standard security measures including SSL encryption and regular security audits. Payment data is processed exclusively by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security certification available.
We do not store card numbers or payment credentials. Access to personal data within our organisation is limited to those who need it to process your order or respond to your enquiry.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and inform affected individuals without undue delay.
8. NEWSLETTER
If you subscribe to the RDS Gallery newsletter, your email address will be used solely to send you gallery updates, new arrivals and occasional promotions. We will not share your email address with third parties for marketing purposes.
Each newsletter contains an unsubscribe link. You may also unsubscribe at any time by emailing roidesicilecontact@gmail.com. Unsubscribe requests are processed within 30 days.
9. LINKS TO THIRD-PARTY SITES
Our websites may contain links to third-party websites. This Privacy Policy does not apply to those sites. We recommend that you read the privacy policy of any site you visit via a link from our pages, as we have no control over their data practices.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date of the most recent revision is indicated at the top of this document. We encourage you to review this page periodically.
For significant changes, we will notify registered customers by email.
11. CONTACT
For any questions about this Privacy Policy or about how we handle your personal data, please contact:
Adrian Grinspan — Roi de Sicile / RDS Gallery
25 rue du Roi de Sicile, 75004 Paris, France